registry / @zibby/core / 0.5.20

@zibby/core@0.5.20

Core test automation engine with multi-agent and multi-MCP support

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 87 file(s), 652 KB of source, external domains: api-prod.zibby.app, api.openai.com, cursor.com, github.com, studio.zibby.dev

Source & flagged code

7 flagged

dist/tools/run-playwright-test.jsView file

Lines 1-6javascript

1import{spawn as T}from"node:child_process";import{existsSync as S}from"node:fs";import{dirname as k,resolve as $,relative as I}from"node:path";var m=new Map,l=8,M={name:"run_playwright_test",description:`Run a Playwright test file and return results. Use this after writing a test to verify it works. If it fails, fix the issues and run again. Maximum ${l} attempts per session.`,inputSchema:{type:"object",properties:{scriptPath:{type:"string",description:"Path to the Playwright test file (e.g., tests/login.spec.js)"}},required:["scriptPath"]},async execute({scriptPath:o},i){let x=`${i?.sessionId ...

2${f}`.split(`

High

Child Process

Package source references child process execution.

dist/tools/run-playwright-test.jsView on unpkg · L1

3`),g="",C=null;for(let a=0;a<p.length;a++){let r=p[a];if(r.includes("Error:")||r.includes("error:")||r.includes("\u2718")){g+=`${r}

4`;for(let n=a+1;n<Math.min(a+5,p.length);n++)g+=`${p[n]}

5`}if(r.includes("at ")&&r.includes(".spec.")){let n=r.match(/:(\d+):\d+/);n&&(C=parseInt(n[1]))}}d(s===0?{success:!0,executionCount:t,message:"All tests passed!",output:c.slice(-500)}:{success:!1,executionCount:t,remainingAttempts:l-t,error:g.slice(0,1500)||"Test failed (see output)",failedAtLine:C,stdout:c.slice(-1500),stderr:f.slice(-500),hint:t<l?"Fix the error and run again.":"Last attempt - make your best fix."})}),u.on("error",s=>{clearTimeout(w),d({success:!1,executionCount:t,error:`Failed to run test: ${s.message}`})})}):{success:!1,executionCount:t,error:`Test file not found: ${e}. Ma ...

Long lines were clipped for display.

dist/index.jsView file

Lines 1-21javascript

1var rn=Object.defineProperty;var nn=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function

dist/strategies/cursor-strategy.jsView file

Lines 1-21javascript

1import{AgentStrategy as De,DEFAULT_OUTPUT_BASE as Fe,SESSION_INFO_FILE as Ge,STOP_REQUEST_FILE as Be,getAllSkills as Je,getSkill as pe}from"@zibby/agent-workflow";import{spawn as Ke,execSync as G}from"node:child_process";import{writeFileSync as fe,readFileSync as me,mkdirSync as ge,existsSync as Y,accessSync as he,constants

dist/strategies/index.jsView file

Lines 46-86javascript

46`)}

48Install cursor-agent:

49 curl https://cursor.com/install -fsS | bash

51Then add to PATH:

52 echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc

54Test with: agent --version`);let w=new ee(e),g=null;if(r){let v=

Source & flagged code

7 flagged · loading source

dist/tools/run-playwright-test.jsView file

High

Child Process

Package source references child process execution.

dist/tools/run-playwright-test.jsView on unpkg · L1

dist/index.jsView file

1var rn=Object.defineProperty;var nn=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function(s){if(typeof require<"u"... L2: `);this.buffer=t.pop()||"";let r="";for(let n of t)if(n.trim())try{let o=JSON.parse(n);this._emitToolCalls(o);let i=this.extractText(o);if(i){if(this.rawText&&i.startsWith(this.raw... L3: `,r+=`${n} ... L12: Use your file writing tool (WriteFile or ApplyPatch) to create this file. L13: DO NOT just output JSON to stdout. The file MUST exist when you finish. L14: DO NOT skip this step. The workflow WILL FAIL if the file is missing. ... L33: L34: `)}getStats(){let e=this.userPrompt.length,t=this.build().length;return{userPromptLength:e,fullPromptLength:t,systemInstructionsLength:t-e,instructionCount:this.systemInstructions.... L35: ${s.slice(-i)}`);let l=`Extract and format the following information into structured JSON matching the schema. ... L39: L40: Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,a={model:J.OPENAI_POSTPROC... L41: Run \`zibby login\` or set ZIBBY_USER_TOKEN environment

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

55\u25C6 Model: ${f||"auto"}${C} L56: `);let I=(await import("chalk")).default,T=E.getUserPrompt();console.log(` L57: ${I.bold("Prompt sent to LLM:")}`),console.log(I.dim("\u2500".repeat(60))),console.log(I.dim(T)),console.log(I.dim("\u2500".repeat(60)));let P=E.build(),D=E.getStats(),v=["--print"...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L55

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

dist/strategies/cursor-strategy.jsView file

1import{AgentStrategy as De,DEFAULT_OUTPUT_BASE as Fe,SESSION_INFO_FILE as Ge,STOP_REQUEST_FILE as Be,getAllSkills as Je,getSkill as pe}from"@zibby/agent-workflow";import{spawn as K... L2: `);this.buffer=t.pop()||"";let r="";for(let s of t)if(s.trim())try{let l=JSON.parse(s);this._emitToolCalls(l);let n=this.extractText(l);if(n){if(this.rawText&&n.startsWith(this.raw... L3: `,r+=`${s} ... L12: Use your file writing tool (WriteFile or ApplyPatch) to create this file. L13: DO NOT just output JSON to stdout. The file MUST exist when you finish. L14: DO NOT skip this step. The workflow WILL FAIL if the file is missing. ... L33: L34: `)}getStats(){let e=this.userPrompt.length,t=this.build().length;return{userPromptLength:e,fullPromptLength:t,systemInstructionsLength:t-e,instructionCount:this.systemInstructions.... L35: ${o.slice(-n)}`);let c=`Extract and format the following information into structured JSON matching the schema. ... L39: L40: Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,y={model:z.OPENAI_POSTPROC... L41: Run \`zibby login\` or set ZIBBY_USER_TOKEN environment

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/strategies/cursor-strategy.jsView on unpkg · L1

dist/strategies/index.jsView file

66`),n=null;for(let o of t){let r=o.trim();if(r)try{let i=JSON.parse(r);if(i.type==="assistant"&&i.message?.content){let a=i.message.content;if(Array.isArray(a)){let c=a.filter(d=>d.... L67: `;if(We(e)){let _=Xe(t||process.cwd()),O=Y(_,".cursor","mcp.json");return Qe(O,D,"utf8"),l.debug(`[MCP] Isolated cursor-agent HOME (session-scoped mcp.json): ${_} | servers: ${Obje... L68: `)){let $=x.replace(`${n}/`,"");P.has($)||(P.add($),U.push($))}}catch{}let b="";U.length>0&&(b=` | \u{1F4C1} new: ${U.map(C=>C.split("/").pop()).join(", ")}`),P.size>0&&(b+=` | \u{... ... L77: This usually means the binary is not in PATH. Try: L78: echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc`))})})}};fe();import{AgentStrategy as Xt,getSkill as Zt,NO_INTEGRATION_TOGGLEABLE_SKILL_IDS as qt}from"@z... L79: `).slice(0,5).join(` L80: `),stringified:(()=>{try{return JSON.stringify(p,Object.getOwnPropertyNames(Object(p)))}catch{return String(p)}})()};throw l.error(`Error during query stream: ${p?.message||p}`,C),... L81: \u25C6 Model: ${D}${O}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/strategies/index.jsView on unpkg · L66

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/strategies/index.jsView on unpkg · L66

Findings

4 High5 Medium7 Low

HighChild Processdist/tools/run-playwright-test.js

HighSame File Env Network Executiondist/strategies/index.js

HighCredential Exfiltrationdist/index.js

HighCommand Output Exfiltrationdist/strategies/index.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/strategies/cursor-strategy.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

7 flagged

dist/tools/run-playwright-test.jsView file

Lines 1-6javascript

2${f}`.split(`

High

Child Process

Package source references child process execution.

dist/tools/run-playwright-test.jsView on unpkg · L1

3`),g="",C=null;for(let a=0;a<p.length;a++){let r=p[a];if(r.includes("Error:")||r.includes("error:")||r.includes("\u2718")){g+=`${r}

4`;for(let n=a+1;n<Math.min(a+5,p.length);n++)g+=`${p[n]}

Long lines were clipped for display.

dist/index.jsView file

Lines 1-21javascript

1var rn=Object.defineProperty;var nn=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function

dist/strategies/cursor-strategy.jsView file

Lines 1-21javascript

1import{AgentStrategy as De,DEFAULT_OUTPUT_BASE as Fe,SESSION_INFO_FILE as Ge,STOP_REQUEST_FILE as Be,getAllSkills as Je,getSkill as pe}from"@zibby/agent-workflow";import{spawn as Ke,execSync as G}from"node:child_process";import{writeFileSync as fe,readFileSync as me,mkdirSync as ge,existsSync as Y,accessSync as he,constants

dist/strategies/index.jsView file

Lines 46-86javascript

46`)}

48Install cursor-agent:

49 curl https://cursor.com/install -fsS | bash

51Then add to PATH:

52 echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc

54Test with: agent --version`);let w=new ee(e),g=null;if(r){let v=

Lines 35-75javascript

35${s.slice(-i)}`);let l=`Extract and format the following information into structured JSON matching the schema.

37RAW CONTENT:

38${c}

40Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,a={model:J.OPENAI_POSTPROCESSING,messages:[{role:"user",content:l}],response_format:{type:"json_schema",json_schema:{name:"extract",schema:o,strict:!0}}};p.info(`\u{1F4E4} Sending to OpenAI proxy: model=${J.OPENAI_POSTPROCESSING}, schema keys=${Object.keys(o.properties||{}).join(", ")}`),p.debug(` Schema size: ${JSON.stringify(o).length} chars`),p.debug(` Prompt size: ${l.length} chars`);try{let u={"Content-Type":"application/json"};proce ...

41 Run \`zibby login\` or set ZIBBY_USER_TOKEN environment variable.

42 Response: ${JSON.stringify(m)}`,{cause:u}):new Error(`Failed to format Cursor output: ${m?.error?.message||"Unknown error"}`,{cause:u})}throw p.error(`\u274C OpenAI proxy request failed: ${u.message}`),new Error(`Failed to format output: ${u.message}`,{cause:u})}}function Y(s

44Checked paths:

45${b.map(R=>` - ${R}`).join(`

46`)}

48Install cursor-agent:

49 curl https://cursor.com/install -fsS | bash

51Then add to PATH:

52 echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc

54Test with: agent --version`);let E=new de(e),S=null;if(o){let R=`zibby-result-${Date.now()}.json`;S=W(r,".zibby","tmp",R);let _=W(r,".zibby","tmp");Re(_)||Qt(_,{recursive:!

55\u25C6 Model: ${f||"auto"}${C}

56`);let I=(await import("chalk")).default,T=E.getUserPrompt();console.log(`

57${I.bold("Prompt sent to LLM:")}`),console.log(I.dim("\u2500".repeat(60))),console.log(I.dim(T)),console.log(I.dim("\u2500".repeat(60)));let P=E.

58`)}catch{}let k,$=null;try{let R=c||(process.env.ZIBBY_SESSION_PATH?String(process.env.ZIBBY_SESSION_PATH).trim():null);k=await this._spawnWithStreaming(w,v,r,a,null,R,h,d)}catch(R){$=R}let N=k?.stdout||"";if(o){let R=typeof o.parse==

59`):A.message?.slice(0,400);if(p.error(`\u274C [Agent] Zod validation FAILED - invalid output schema:

60${x}`),p.error(`\u{1F4C4} [Agent] Invalid JSON written to file:

61${JSON.stringify(_,null,2).slice(0,500)}`),!m)throw new Error(`Agent output failed schema validation:

62${x}

64The agent wrote invalid data that doesn't match the required outputSchema.

65Enable strictMode in .zibby.config.js for automatic repair.`,{cause:A})}else{if(_)return p.info("\u2705 [Agent] File-based output extracted (no Zod parse fn) \u2014 accepting as structured"),m&&p.debug("[Agent] strictMode enabled but not needed \u2014 agent wrote valid file"),{raw:N,structured:_};M&&p.error("\u274C [Agent] Result file exists but produced no in-memory JSON (parse failed earlier)")}if(m&&!$){let A=k.parsedText,x=_?JSON.stringify(_):

66`),r=null;for(let n of t){let o=n.trim();if(o)try{let i=JSON.parse(o);if(i.type==="assistant"&&i.message?.content){let c=i.message.content;if(Array.isArray(c)){let l=c.filter(a=>a.type==="text"&&a.text).map(a=>a.text).join("");l&&(r=l)}else typeof c=="string"&&c&&(r=c)}}catch{}}return r?.trim()||null}_setupMcpConfig(e,t,r,n=null,o=null){let i=r?.headless,c=W(Le(),".cursor"),l=W(c,"mcp.json"),a={};if(Re(l))try{a=JSON.parse(qt(l,"utf-8"))}catch{}let u=a.mcpServers||{},d=r?.paths?.output||Pn,m=W(t||process.cwd(),d,kn),f=Array.isArray(n)?n.map(h=>Zt(h)).filter(Boolean):[...Rn()].map(([,h])=>h),g=n ...

67`;if(Ht(e)){let h=Wt(t||process.cwd()),b=W(h,".cursor","mcp.json");return Xt(b,y,"utf8"),p.debug(`[MCP] Isolated cursor-agent HOME (session-scoped mcp.json): ${h} | servers: ${Object.keys(u).join(", ")}`),{isolatedMcpHome:h}}return Re(c)||Qt(c,{recursive:!0}),Xt(l,y,

68`)){let j=U.replace(`${r}/`,"");k.has(j)||(k.add(j),F.push(j))}}catch{}let A="";F.length>0&&(A=` | \u{1F4C1} new: ${F.map(L=>L.split("/").pop()).join(", ")}`),k.size>0&&(A+=` | \u{1F4E6} total: ${k.size} files`),p.debug(`\u{1F493} [Agent] Running for ${_}s | ${y} lines output${A}`),y===0&&_>=30&&k.size===0&&(_<35&&p.warn(`\u26A0\uFE0F [Agent] No output after ${_}s \u2014 agent may be stuck. Check your CURSOR_API_KEY.`),_>=60&&(h=!0,b=b||"stall",p.error(`\u274C [Agent] No response after ${_}s \u2014 killing. Verify CURSOR_API_KEY is valid and agent CLI works: agent --version`),T.kill("SIGTERM" ...

69${m.slice(-2e3)}`),T.kill("SIGTERM"),setTimeout(()=>{T.killed||T.kill("SIGKILL")},5e3)},n),R=new V;R.onToolCall=(_,M)=>{let F=_,A=M;if(_==="mcpToolCall"&&M?.name)F=M.name.replace(/^mcp_+[^_]+_+/,""),F.includes("-")&&F.split("-")[0]===F.split("-")[1]&&(F=F.split("-")[0]),A=M.args??M.input??M;else{if(_==="readToolCall"||_==="editToolCall"||_==="writeToolCall")return;(_.startsWith("mcp__")||_.includes("ToolCall"))&&(F=_.replace(/^mcp_+[^_]+_+/,"").replace(/ToolCall$/,""))}if(F.includes("memory")?Z.stepMemory(`Tool: ${F}`

70`).filter(x=>x.trim());y+=A.length}),T.stderr.on("data",_=>{let M=_.toString();f+=M,g=Date.now(),w||(w=!0);let F=M.split(`

71`).filter(A=>A.trim());for(let A of F)p.warn(`\u26A0\uFE0F [Agent stderr] ${A}`)}),T.on("close",(_,M)=>{if(E=!0,C(),clearTimeout(B),clearInterval(N),v&&clearInterval(v),P&&clearTimeout(P),l&&!l.aborted)try{l.removeEventListener("abort",D)}catch{}R.flush();let F=Math.round((Date.now()-d)/1e3);if(p.debug(`[Agent] Exited: code=${_}, signal=${M}, elapsed=${F}s, output=${m.length} chars`),h){if(b==="aborted"){let L=new Error("Aborted via signal");L.name="AbortError",u(L);return}u(new Error(`Cursor Agent timed out after ${F}s (limit: ${n/1e3}s). ${y} lines produced. Last output ${Math.round((Date.n ...

72Partial output (last 500 chars):

73${m.slice(-500)}`:"No output captured."}`));return}if(_!==0){u(new Error(`Cursor Agent failed: exit code ${_}, signal ${l}. ${f.trim()?`

74Stderr: ${f.slice(-1e3)}`:""}${m.trim()?`

75Stdout (last 500 chars): ${m.slice(-500)}`:""}`));return}let A=R.getResult(),x=A?JSON.stringify(A,null,2):R.getRawText()||m||"";a({stdout:m||f||"",parsedText:x})}),T.on("error",_

Long lines were clipped for display.