registry / @theronap/cortex-mcp / 0.9.36

@theronap/cortex-mcp@0.9.36

Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 167 KB of source, external domains: cortex-console.vercel.app

Source & flagged code

2 flagged

lib/capture.mjsView file

Lines 1-35javascript

1import { readFileSync } from 'fs'

2import { homedir } from 'os'

3import { resolve } from 'path'

4import { createHash } from 'crypto'

5import { fetchCortex, classify, resolveBase, readWiredToken } from './diagnose.mjs'

6import { extractSession } from './edge_extract.mjs'

7import { extractTyped } from './extract_typed.mjs'

8import { redactSecrets } from './redact.mjs'

10// Fetch the node-type registry (global + this org's custom types) — the catalog the typed extractor

11// produces against. Best-effort: null on any failure (typed extraction is then skipped, never blocks capture).

12async function fetchRegistry(base, token) {

13 try {

14 const res = await fetchCortex(`${base}/api/node-types`, { headers: { Authorization: `Bearer ${token}` } })

15 if (!res.ok) return null

16 const j = await res.json().catch(() => ({}))

17 return Array.isArray(j.types) ? j.types : null

18 } catch {

19 return null

20 }

21}

23// Project name from the hook cwd — cross-platform. Windows hooks send backslash paths,

24// and splitting on '/' alone turned the WHOLE path into one garbage project slug

25// ("c-users-webst-onedrive-…", three-machine dry-run finding 2026-06-09). A session run

26// from the home directory itself is 'general', not a project named after the user.

27export function projectFrom(cwd) {

28 if (!cwd) return 'general'

29 try {

30 if (resolve(String(cwd)) === homedir()) return 'general'

31 } catch { /* unresolvable path — fall through to basename */ }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L15

32 const base = String(cwd).split(/[\\/]+/).filter((s) => s && !/^[A-Za-z]:$/.test(s)).pop()

33 return base ?? 'general'

34}

lib/redact.test.mjsView file

Lines 21-61javascript

21 ['ghp_' + 'd'.repeat(36), 'github'],

22 ['github_pat_' + 'e'.repeat(30), 'github-pat'],

23 ['AKIA' + 'ABCDEFGHIJKLMNOP', 'aws-akid'],

Source & flagged code

2 flagged · loading source

lib/capture.mjsView file

15if (!res.ok) return null L16: const j = await res.json().catch(() => ({})) L17: return Array.isArray(j.types) ? j.types : null ... L29: try { L30: if (resolve(String(cwd)) === homedir()) return 'general' L31: } catch { /* unresolvable path — fall through to basename */ } ... L86: // would recurse (and re-ingest the summarizer's prompt as a phantom session). Bail immediately. L87: if (process.env.CORTEX_SUMMARIZING) { process.stderr.write('cortex: summarizer subprocess, skipping\n'); return } L88:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L15

lib/redact.test.mjsView file

41patternName = private_key_rsa severity = critical line = 41 matchedText = const ou...--')

Critical

Secret Pattern

RSA private key in lib/redact.test.mjs

lib/redact.test.mjsView on unpkg · L41

Findings

1 Critical2 Medium4 Low

CriticalSecret Patternlib/redact.test.mjs

MediumNetwork

MediumEnvironment Vars

LowWeak Cryptolib/capture.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

lib/capture.mjsView file

Lines 1-35javascript

1import { readFileSync } from 'fs'

2import { homedir } from 'os'

3import { resolve } from 'path'

4import { createHash } from 'crypto'

5import { fetchCortex, classify, resolveBase, readWiredToken } from './diagnose.mjs'

6import { extractSession } from './edge_extract.mjs'

7import { extractTyped } from './extract_typed.mjs'

8import { redactSecrets } from './redact.mjs'

10// Fetch the node-type registry (global + this org's custom types) — the catalog the typed extractor

11// produces against. Best-effort: null on any failure (typed extraction is then skipped, never blocks capture).

12async function fetchRegistry(base, token) {

13 try {

14 const res = await fetchCortex(`${base}/api/node-types`, { headers: { Authorization: `Bearer ${token}` } })

15 if (!res.ok) return null

16 const j = await res.json().catch(() => ({}))

17 return Array.isArray(j.types) ? j.types : null

18 } catch {

19 return null

20 }

21}

23// Project name from the hook cwd — cross-platform. Windows hooks send backslash paths,

24// and splitting on '/' alone turned the WHOLE path into one garbage project slug

25// ("c-users-webst-onedrive-…", three-machine dry-run finding 2026-06-09). A session run

26// from the home directory itself is 'general', not a project named after the user.

27export function projectFrom(cwd) {

28 if (!cwd) return 'general'

29 try {

30 if (resolve(String(cwd)) === homedir()) return 'general'

31 } catch { /* unresolvable path — fall through to basename */ }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L15

32 const base = String(cwd).split(/[\\/]+/).filter((s) => s && !/^[A-Za-z]:$/.test(s)).pop()

33 return base ?? 'general'

34}

lib/redact.test.mjsView file

Lines 21-61javascript

21 ['ghp_' + 'd'.repeat(36), 'github'],

22 ['github_pat_' + 'e'.repeat(30), 'github-pat'],

23 ['AKIA' + 'ABCDEFGHIJKLMNOP', 'aws-akid'],