registry / @tokz/cli / 0.1.1

@tokz/cli@0.1.1

Audit where your coding agent's context window and API dollars go.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The user-invoked CLI locally reads agent session/config files to calculate token and cost reports; source contains no exfiltration or mutation path.

Static reason

No blocking static signals were detected.

Trigger

User runs the `tokz` CLI or `tokz audit`.

Impact

Local session metadata and MCP server names are displayed in terminal reports only.

Mechanism

Read-only local agent transcript and configuration analysis.

Rationale

The package is an explicitly user-invoked, read-only local analytics CLI for coding-agent session data. Source inspection found no install-time execution, data exfiltration, filesystem mutation, remote execution, or AI-agent control-surface modification.

Evidence

package.jsondist/cli.jsdist/chunk-MO4Y7IF6.jsdist/Root-T6AZELSZ.jsREADME.mddist/Fullscreen-GK2ZYXHV.js~/.claude/projects/**/*.jsonl.mcp.json~/.claude.json~/.codex/sessions/**/*.jsonl~/.local/share/opencode/storage/**/*.json

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

`dist/cli.js` explicitly invokes local transcript auditing.
`dist/chunk-MO4Y7IF6.js` reads Claude transcripts and MCP config.
`dist/Root-T6AZELSZ.js` reads Codex and OpenCode local session data.

Evidence against

`package.json` has no preinstall/install/postinstall lifecycle hook.
All filesystem imports are read/access/stream APIs; no write or delete API is present.
No network client, URL, child-process, eval, or payload-loading primitive appears in distributed code.
Dynamic imports in `dist/cli.js` load only bundled UI modules and dependencies.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 77.8 KB of source

Source & flagged code

3 flagged

dist/cli.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/cli.js` explicitly invokes local transcript auditing.

dist/cli.jsView on unpkg

dist/chunk-MO4Y7IF6.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/chunk-MO4Y7IF6.js` reads Claude transcripts and MCP config.

dist/chunk-MO4Y7IF6.jsView on unpkg

dist/Root-T6AZELSZ.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/Root-T6AZELSZ.js` reads Codex and OpenCode local session data.

dist/Root-T6AZELSZ.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/cli.js` explicitly invokes local transcript auditing.

dist/cli.jsView on unpkg

dist/chunk-MO4Y7IF6.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/chunk-MO4Y7IF6.js` reads Claude transcripts and MCP config.

dist/chunk-MO4Y7IF6.jsView on unpkg

dist/Root-T6AZELSZ.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/Root-T6AZELSZ.js` reads Codex and OpenCode local session data.

dist/Root-T6AZELSZ.jsView on unpkg

Findings

1 Medium6 Low

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowAi Review Evidencedist/cli.js

LowAi Review Evidencedist/chunk-MO4Y7IF6.js

LowAi Review Evidencedist/Root-T6AZELSZ.js