registry / @theronap/cortex-mcp / 0.9.47

@theronap/cortex-mcp@0.9.47

Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 27 file(s), 225 KB of source, external domains: cortex-console.vercel.app, www.apple.com

Source & flagged code

3 flagged

lib/capture.mjsView file

Lines 1-21javascript

1import { readFileSync } from 'fs'

2import { spawn } from 'child_process'

3import { homedir } from 'os'

4import { resolve, dirname, join } from 'path'

5import { fileURLToPath } from 'url'

Source & flagged code

3 flagged · loading source

lib/capture.mjsView file

1import { readFileSync } from 'fs' L2: import { spawn } from 'child_process' L3: import { homedir } from 'os' ... L17: if (!res.ok) return null L18: const j = await res.json().catch(() => ({})) L19: return Array.isArray(j.types) ? j.types : null ... L31: try { L32: if (resolve(String(cwd)) === homedir()) return 'general' L33: } catch { /* unresolvable path — fall through to basename */ } ... L94: // recurse (and re-ingest the summarizer's prompt as a phantom session). Bail immediately. L95: if (process.env.CORTEX_SUMMARIZING) { process.stderr.write('cortex: summarizer subprocess, skipping\n'); return } L96:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L1

lib/uninstall.mjsView file

3import { join } from 'path' L4: import { execFileSync } from 'child_process' L5: ... L12: // 6. launchd agent → ~/Library/LaunchAgents/com.cortex.*.plist (unload + remove) L13: // 7. crontab → lines tagged "# cortex ..." L14: // 8. off-switch env → launchctl unsetenv CORTEX_SUMMARIZE_DISABLED (macOS) ... L20: L21: const HOME = homedir() L22: const CLAUDE_JSON = join(HOME, '.claude.json') ... L36: L37: process.stdout.write(dry ? '\nCortex uninstall — DRY RUN (nothing will change):\n\n' : '\nCortex uninstall — removing all wiring…\n\n') L38:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/uninstall.mjsView on unpkg · L3

lib/graphify_sync.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @theronap/cortex-mcp@0.9.45 matchedIdentity = npm:QHRoZXJvbmFwL2NvcnRleC1tY3A:0.9.45 similarity = 0.880 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/graphify_sync.mjsView on unpkg

Findings

1 High3 Medium4 Low

HighPrevious Version Dangerous Deltalib/graphify_sync.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/uninstall.mjs

LowWeak Cryptolib/capture.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

lib/uninstall.mjsView file

Lines 1-23javascript

1import { readFileSync, writeFileSync, existsSync, copyFileSync, rmSync } from 'fs'

2import { homedir } from 'os'

3import { join } from 'path'

4import { execFileSync } from 'child_process'

6// Full uninstall — the reverse of setup.mjs. Removes EVERY touch-point Cortex writes onto a machine:

7// 1. ~/.claude.json → mcpServers.cortex

8// 2. ~/.claude/settings.json → Stop/SessionStart/PreCompact cortex hooks

9// 3. ~/.codex/config.toml → [mcp_servers.cortex] + [mcp_servers.cortex.env]

10// 4. ~/.codex/hooks.json → cortex capture Stop hook

11// 5. managed skills → ~/.claude/skills/cortex* + ~/.codex/skills/cortex*

12// 6. launchd agent → ~/Library/LaunchAgents/com.cortex.*.plist (unload + remove)

13// 7. crontab → lines tagged "# cortex ..."

14// 8. off-switch env → launchctl unsetenv CORTEX_SUMMARIZE_DISABLED (macOS)

15// --purge also removes: ~/.cortex state dir, the npx cache, and every .cortex-bak backup.

16//

17// Safe by construction: --dry-run prints the plan and changes nothing; every JSON/TOML file is backed

18// up to <file>.cortex-uninstall-bak before edit; JSON surgery filters only cortex-tagged entries and

19// leaves every other MCP server / hook untouched. Idempotent — re-running is a no-op.

21const HOME = homedir()

22const CLAUDE_JSON = join(HOME, '.claude.json')

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/uninstall.mjsView on unpkg · L3

23const SETTINGS = join(HOME, '.claude', 'settings.json')