registry / @tokz/cli / 0.2.2

@tokz/cli@0.2.2

Audit where your coding agent's context window and API dollars go.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked local auditing CLI that reads agent session/config files to calculate token usage and costs; no writes, network endpoints, or install-time execution were found.

Static reason

No blocking static signals were detected.

Trigger

User runs the `tokz` CLI or launches its interactive UI.

Impact

Accesses local agent usage/session data only to render reports; no exfiltration or persistence is established.

Mechanism

Local read-only parsing of agent transcripts and configuration metadata.

Rationale

Source inspection shows a local, user-invoked usage-audit CLI with read-only transcript/config parsing. No concrete malicious behavior, install hook, exfiltration path, or control-surface mutation was found.

Evidence

package.jsondist/cli.jsdist/chunk-JAZOB7NC.jsdist/Root-6SZ5FQDN.jsdist/Fullscreen-GK2ZYXHV.js

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

`dist/cli.js` explicitly invokes local transcript and MCP-config discovery when the user runs `tokz`.
`dist/Root-6SZ5FQDN.js` reads local Claude, Codex, and OpenCode session data for usage reporting.

Evidence against

`package.json` has no preinstall, install, or postinstall lifecycle hook.
`dist/cli.js` only registers user-invoked CLI commands and renders reports/UI.
`dist/chunk-JAZOB7NC.js` uses filesystem reads and globs only; no filesystem mutation APIs are present.
No network, child-process, eval/vm, native loading, or credential-exfiltration primitives were found in bundled source.
`dist/Root-6SZ5FQDN.js` parses local session token metadata and displays aggregate usage/cost data.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 79.6 KB of source

Source & flagged code

2 flagged

dist/cli.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/cli.js` explicitly invokes local transcript and MCP-config discovery when the user runs `tokz`.

dist/cli.jsView on unpkg

dist/Root-6SZ5FQDN.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/Root-6SZ5FQDN.js` reads local Claude, Codex, and OpenCode session data for usage reporting.

dist/Root-6SZ5FQDN.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/cli.js` explicitly invokes local transcript and MCP-config discovery when the user runs `tokz`.

dist/cli.jsView on unpkg

dist/Root-6SZ5FQDN.jsView file

•Published source reference

Low

Ai Review Evidence

`dist/Root-6SZ5FQDN.js` reads local Claude, Codex, and OpenCode session data for usage reporting.

dist/Root-6SZ5FQDN.jsView on unpkg

Findings

1 Medium5 Low

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowAi Review Evidencedist/cli.js

LowAi Review Evidencedist/Root-6SZ5FQDN.js