registry / @zibby/core / 0.5.21

@zibby/core@0.5.21

⚠ Under review

Core test automation engine with multi-agent and multi-MCP support

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 87 file(s), 672 KB of source, external domains: api-prod.zibby.app, api.openai.com, cursor.com, github.com, studio.zibby.dev

Source & flagged code

8 flagged

dist/tools/run-playwright-test.jsView file

Lines 1-6javascript

1import{spawn as T}from"node:child_process";import{existsSync as S}from"node:fs";import{dirname as k,resolve as $,relative as I}from"node:path";var m=new Map,l=8,M={name:"run_playwright_test",description:`Run a Playwright test file and return results. Use this after writing a test to verify it works. If it fails, fix the issues and run again. Maximum ${l} attempts per session.`,inputSchema:{type:"object",properties:{scriptPath:{type:"string",description:"Path to the Playwright test file (e.g., tests/login.spec.js)"}},required:["scriptPath"]},async execute({scriptPath:o},i){let x=`${i?.sessionId ...

2${f}`.split(`

High

Child Process

Package source references child process execution.

dist/tools/run-playwright-test.jsView on unpkg · L1

3`),g="",C=null;for(let a=0;a<p.length;a++){let r=p[a];if(r.includes("Error:")||r.includes("error:")||r.includes("\u2718")){g+=`${r}

4`;for(let n=a+1;n<Math.min(a+5,p.length);n++)g+=`${p[n]}

5`}if(r.includes("at ")&&r.includes(".spec.")){let n=r.match(/:(\d+):\d+/);n&&(C=parseInt(n[1]))}}d(s===0?{success:!0,executionCount:t,message:"All tests passed!",output:c.slice(-500)}:{success:!1,executionCount:t,remainingAttempts:l-t,error:g.slice(0,1500)||"Test failed (see output)",failedAtLine:C,stdout:c.slice(-1500),stderr:f.slice(-500),hint:t<l?"Fix the error and run again.":"Last attempt - make your best fix."})}),u.on("error",s=>{clearTimeout(w),d({success:!1,executionCount:t,error:`Failed to run test: ${s.message}`})})}):{success:!1,executionCount:t,error:`Test file not found: ${e}. Ma ...

Long lines were clipped for display.

dist/index.jsView file

Lines 1-21javascript

1var an=Object.defineProperty;var ln=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function

dist/strategies/cursor-strategy.jsView file

Lines 1-21javascript

1import{AgentStrategy as De,DEFAULT_OUTPUT_BASE as Fe,SESSION_INFO_FILE as Ge,STOP_REQUEST_FILE as Be,getAllSkills as Je,getSkill as pe}from"@zibby/agent-workflow";import{spawn as Ke,execSync as G}from"node:child_process";import{writeFileSync as fe,readFileSync as me,mkdirSync as ge,existsSync as Y,accessSync as he,constants

dist/strategies/index.jsView file

Lines 46-86javascript

46`)}

48Install cursor-agent:

49 curl https://cursor.com/install -fsS | bash

51Then add to PATH:

52 echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc

54Test with: agent --version`);let T=new ee(e),g=null;if(s){let v

Source & flagged code

8 flagged · loading source

dist/tools/run-playwright-test.jsView file

High

Child Process

Package source references child process execution.

dist/tools/run-playwright-test.jsView on unpkg · L1

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @zibby/core@0.5.20 matchedIdentity = npm:QHppYmJ5L2NvcmU:0.5.20 similarity = 0.908 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

1var an=Object.defineProperty;var ln=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function(s){if(typeof require<"u"... L2: `);this.buffer=t.pop()||"";let r="";for(let n of t)if(n.trim())try{let o=JSON.parse(n);this._emitToolCalls(o);let i=this.extractText(o);if(i){if(this.rawText&&i.startsWith(this.raw... L3: `,r+=`${n} ... L12: Use your file writing tool (WriteFile or ApplyPatch) to create this file. L13: DO NOT just output JSON to stdout. The file MUST exist when you finish. L14: DO NOT skip this step. The workflow WILL FAIL if the file is missing. ... L33: L34: `)}getStats(){let e=this.userPrompt.length,t=this.build().length;return{userPromptLength:e,fullPromptLength:t,systemInstructionsLength:t-e,instructionCount:this.systemInstructions.... L35: ${s.slice(-i)}`);let l=`Extract and format the following information into structured JSON matching the schema. ... L39: L40: Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,a={model:J.OPENAI_POSTPROC... L41: Run \`zibby login\` or set ZIBBY_USER_TOKEN environment

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

55\u25C6 Model: ${f||"auto"}${P} L56: `);let k=(await import("chalk")).default,v=E.getUserPrompt();console.log(` L57: ${k.bold("Prompt sent to LLM:")}`),console.log(k.dim("\u2500".repeat(60))),console.log(k.dim(v)),console.log(k.dim("\u2500".repeat(60)));let j=E.build(),F=E.getStats(),T=["--print"...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L55

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

dist/strategies/cursor-strategy.jsView file

1import{AgentStrategy as De,DEFAULT_OUTPUT_BASE as Fe,SESSION_INFO_FILE as Ge,STOP_REQUEST_FILE as Be,getAllSkills as Je,getSkill as pe}from"@zibby/agent-workflow";import{spawn as K... L2: `);this.buffer=t.pop()||"";let r="";for(let s of t)if(s.trim())try{let l=JSON.parse(s);this._emitToolCalls(l);let n=this.extractText(l);if(n){if(this.rawText&&n.startsWith(this.raw... L3: `,r+=`${s} ... L12: Use your file writing tool (WriteFile or ApplyPatch) to create this file. L13: DO NOT just output JSON to stdout. The file MUST exist when you finish. L14: DO NOT skip this step. The workflow WILL FAIL if the file is missing. ... L33: L34: `)}getStats(){let e=this.userPrompt.length,t=this.build().length;return{userPromptLength:e,fullPromptLength:t,systemInstructionsLength:t-e,instructionCount:this.systemInstructions.... L35: ${o.slice(-n)}`);let c=`Extract and format the following information into structured JSON matching the schema. ... L39: L40: Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,y={model:z.OPENAI_POSTPROC... L41: Run \`zibby login\` or set ZIBBY_USER_TOKEN environment

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/strategies/cursor-strategy.jsView on unpkg · L1

dist/strategies/index.jsView file

66`),n=null;for(let o of t){let s=o.trim();if(s)try{let i=JSON.parse(s);if(i.type==="assistant"&&i.message?.content){let a=i.message.content;if(Array.isArray(a)){let c=a.filter(d=>d.... L67: `;if(Qe(e)){let S=et(t||process.cwd()),O=Y(S,".cursor","mcp.json");return nt(O,x,"utf8"),l.debug(`[MCP] Isolated cursor-agent HOME (session-scoped mcp.json): ${S} | servers: ${Obje... L68: `)){let k=$.replace(`${n}/`,"");A.has(k)||(A.add(k),R.push(k))}}catch{}let y="";R.length>0&&(y=` | \u{1F4C1} new: ${R.map(C=>C.split("/").pop()).join(", ")}`),A.size>0&&(y+=` | \u{... ... L77: This usually means the binary is not in PATH. Try: L78: echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc`))})})}};pe();import{AgentStrategy as to,getSkill as oo,NO_INTEGRATION_TOGGLEABLE_SKILL_IDS as no}from"@z... L79: `).slice(0,5).join(` L80: `),stringified:(()=>{try{return JSON.stringify(p,Object.getOwnPropertyNames(Object(p)))}catch{return String(p)}})()};throw l.error(`Error during query stream: ${p?.message||p}`,C),... L81: \u25C6 Model: ${S}${E}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/strategies/index.jsView on unpkg · L66

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/strategies/index.jsView on unpkg · L66

Findings

1 Critical4 High5 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/index.js

HighChild Processdist/tools/run-playwright-test.js

HighSame File Env Network Executiondist/strategies/index.js

HighCredential Exfiltrationdist/index.js

HighCommand Output Exfiltrationdist/strategies/index.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/strategies/cursor-strategy.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Lines 35-75javascript

35${s.slice(-i)}`);let l=`Extract and format the following information into structured JSON matching the schema.

37RAW CONTENT:

38${c}

40Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,a={model:J.OPENAI_POSTPROCESSING,messages:[{role:"user",content:l}],response_format:{type:"json_schema",json_schema:{name:"extract",schema:o,strict:!0}}};p.info(`\u{1F4E4} Sending to OpenAI proxy: model=${J.OPENAI_POSTPROCESSING}, schema keys=${Object.keys(o.properties||{}).join(", ")}`),p.debug(` Schema size: ${JSON.stringify(o).length} chars`),p.debug(` Prompt size: ${l.length} chars`);try{let u={"Content-Type":"application/json"};proce ...

41 Run \`zibby login\` or set ZIBBY_USER_TOKEN environment variable.

42 Response: ${JSON.stringify(m)}`,{cause:u}):new Error(`Failed to format Cursor output: ${m?.error?.message||"Unknown error"}`,{cause:u})}throw p.error(`\u274C OpenAI proxy request failed: ${u.message}`),new Error(`Failed to format output: ${u.message}`,{cause:u})}}function Y(s

44Checked paths:

45${b.map(C=>` - ${C}`).join(`

46`)}

48Install cursor-agent:

49 curl https://cursor.com/install -fsS | bash

51Then add to PATH:

52 echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc

54Test with: agent --version`);let E=new de(e),S=null;if(o){let C=`zibby-result-${Date.now()}.json`;S=W(r,".zibby","tmp",C);let x=W(r,".zibby","tmp");Le(x)||nr(x,{recursive:!

55\u25C6 Model: ${f||"auto"}${P}

56`);let k=(await import("chalk")).default,v=E.getUserPrompt();console.log(`

57${k.bold("Prompt sent to LLM:")}`),console.log(k.dim("\u2500".repeat(60))),console.log(k.dim(v)),console.log(k.dim("\u2500".repeat(60)));let j=E.build(),F=E.getStats(),T

58`)}catch{}let O,I=null;try{let C=c||(process.env.ZIBBY_SESSION_PATH?String(process.env.ZIBBY_SESSION_PATH).trim():null);O=await this._spawnWithStreaming(w,T,r,a,null,C,h,d)}catch(C){I=C}let N=O?.stdout||

59`):A.message?.slice(0,400);if(p.error(`\u274C [Agent] Zod validation FAILED - invalid output schema:

60${_}`),p.error(`\u{1F4C4} [Agent] Invalid JSON written to file:

61${JSON.stringify(x,null,2).slice(0,500)}`),!m)throw new Error(`Agent output failed schema validation:

62${_}

64The agent wrote invalid data that doesn't match the required outputSchema.

65Enable strictMode in .zibby.config.js for automatic repair.`,{cause:A})}else{if(x)return p.info("\u2705 [Agent] File-based output extracted (no Zod parse fn) \u2014 accepting as structured"),m&&p.debug("[Agent] strictMode enabled but not needed \u2014 agent wrote valid file"),{raw:N,structured:x};R&&p.error("\u274C [Agent] Result file exists but produced no in-memory JSON (parse failed earlier)")}if(m&&!I){let A=O.parsedText,_=x?JSON.stringify

66`),r=null;for(let n of t){let o=n.trim();if(o)try{let i=JSON.parse(o);if(i.type==="assistant"&&i.message?.content){let c=i.message.content;if(Array.isArray(c)){let l=c.filter(a=>a.type==="text"&&a.text).map(a=>a.text).join("");l&&(r=l)}else typeof c=="string"&&c&&(r=c)}}catch{}}return r?.trim()||null}_setupMcpConfig(e,t,r,n=null,o=null){let i=r?.headless,c=W(Me(),".cursor"),l=W(c,"mcp.json"),a={};if(Le(l))try{a=JSON.parse(rr(l,"utf-8"))}catch{}let u=a.mcpServers||{},d=r?.paths?.output||Ln,m=W(t||process.cwd(),d,Mn),f=Array.isArray(n)?n.map(h=>er(h)).filter(Boolean):[...Un()].map(([,h])=>h),g=n ...

67`;if(Xt(e)){let h=qt(t||process.cwd()),b=W(h,".cursor","mcp.json");return tr(b,y,"utf8"),p.debug(`[MCP] Isolated cursor-agent HOME (session-scoped mcp.json): ${h} | servers: ${Object.keys(u).join(", ")}`),{isolatedMcpHome:h}}return Le(c)||nr(c,{recursive:!0}),tr(l,y,

68`)){let U=M.replace(`${r}/`,"");O.has(U)||(O.add(U),D.push(U))}}catch{}let A="";D.length>0&&(A=` | \u{1F4C1} new: ${D.map(L=>L.split("/").pop()).join(", ")}`),O.size>0&&(A+=` | \u{1F4E6} total: ${O.size} files`),p.debug(`\u{1F493} [Agent] Running for ${x}s | ${y} lines output${A}`),y===0&&x>=30&&O.size===0&&(x<35&&p.warn(`\u26A0\uFE0F [Agent] No output after ${x}s \u2014 agent may be stuck. Check your CURSOR_API_KEY.`),x>=60&&(h=!0,b=b||"stall",p.error(`\u274C [Agent] No response after ${x}s \u2014 killing. Verify CURSOR_API_KEY is valid and agent CLI works: agent --version`),v.kill("SIGTERM" ...

69${m.slice(-2e3)}`),v.kill("SIGTERM"),setTimeout(()=>{v.killed||v.kill("SIGKILL")},5e3)},n),C=new V;C.onToolCall=(x,R)=>{let D=x,A=R;if(x==="mcpToolCall"&&R?.name)D=R.name.replace(/^mcp_+[^_]+_+/,""),D.includes("-")&&D.split("-")[0]===D.split("-")[1]&&(D=D.split("-")[0]),A=R.args??R.input??R;else{if(x==="readToolCall"||x==="editToolCall"||x==="writeToolCall")return;(x.startsWith("mcp__")||x.includes("ToolCall"))&&(D=x.replace(/^mcp_+[^_]+_+/,"").replace(/ToolCall$/,""))}if(D.includes("memory")?Z.stepMemory(`Tool: ${D}`

70`).filter(_=>_.trim());y+=A.length}),v.stderr.on("data",x=>{let R=x.toString();f+=R,g=Date.now(),w||(w=!0);let D=R.split(`

71`).filter(A=>A.trim());for(let A of D)p.warn(`\u26A0\uFE0F [Agent stderr] ${A}`)}),v.on("close",(x,R)=>{if(E=!0,P(),clearTimeout(B),clearInterval(N),T&&clearInterval(T),j&&clearTimeout(j),l&&!l.aborted)try{l.removeEventListener("abort",F)}catch{}C.flush();let D=Math.round((Date.now()-d)/1e3);if(p.debug(`[Agent] Exited: code=${x}, signal=${R}, elapsed=${D}s, output=${m.length} chars`),h){if(b==="aborted"){let L=new Error("Aborted via signal");L.name="AbortError",u(L);return}u(new Error(`Cursor Agent timed out after ${D}s (limit: ${n/1e3}s). ${y} lines produced. Last output ${Math.round((Date.n ...

72Partial output (last 500 chars):

73${m.slice(-500)}`:"No output captured."}`));return}if(x!==0){u(new Error(`Cursor Agent failed: exit code ${x}, signal ${l}. ${f.trim()?`

74Stderr: ${f.slice(-1e3)}`:""}${m.trim()?`

75Stdout (last 500 chars): ${m.slice(-500)}`:""}`));return}let A=C.getResult(),_=A?JSON.stringify(A,null,2):C.getRawText()||m||"";a({stdout:m||f||"",parsedText:_})}),v.on("error",x

Long lines were clipped for display.