aegiscode@6.5.6

⚠ Under review

aegiscode — the command-line version of AEGIS Desktop. The shared tool surface in your shell, over the same thin transport and tool registry as the MCP plugin and the desktop app. Ships transport + UI only; no brain.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 51 file(s), 678 KB of source, external domains: 127.0.0.1, aegiscloud.org, github.com, registry.npmjs.org, www.youtube.com, x.test

Source & flagged code

5 flagged

bin/aegiscode.jsView file

Lines 1-36javascript

1#!/usr/bin/env node

2'use strict';

4/**

5 * `aegiscode` — the AEGIS terminal host.

6 *

7 * Third host over the same two shared pieces the other two use: the thin

8 * transport (client/aegis.js) and the tool registry (mcp/tools.js). The MCP

9 * host answers a coding agent's tool calls; the desktop is a window; this is

10 * the shell. None of them owns a brain — routing, tiers, memory and billing all

11 * stay behind aegiscloud.org.

12 *

13 * This file is argument parsing and process lifecycle only. Everything

14 * testable lives in ../src/app.js.

15 */

17const path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aegiscode.jsView on unpkg · L16

19const HELP = `aegiscode — AEGIS in your shell.

21Usage:

22 aegiscode interactive session

23 aegiscode "question" one-shot, then exit

24 aegiscode -p "question" same, explicit

25 echo "q" | aegiscode -p - read the prompt from stdin

27Account:

28 aegiscode login [<key>] save your AEGIS API key (prompts, no echo, if omitted)

29 aegiscode logout remove the saved key

30 aegiscode key status show which key is in use and where it came from

32Options:

33 -m, --model <id> pin a model id (see /models; default: server choice)

34 --base <url> API base (default $AEGIS_API_BASE or aegiscloud.org)

35 --key <key> API key for THIS RUN only — it is not saved. Use

36 "aegiscode login" to store one for good.

vendor/client/foreign-memory.jsView file

Lines 42-82javascript

42 */

44const fs = require('node:fs');

45const path = require('node:path');

46const

src/system.jsView file

8* pointed at Anthropic/Claude support endpoints; those are re-homed to the L9: * AEGIS base (https://aegiscloud.org) and the project repo. Deep paths that L10: * had no AEGIS equivalent collapse to the base rather than inventing a route. ... L12: L13: const { spawn } = require('node:child_process'); L14: ... L17: try { L18: const platform = process.platform; L19: const cmd = platform === 'darwin' ? ['open'] : platform === 'win32' ? ['cmd', '/c', 'start', ''] : ['xdg-open'];

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/system.jsView on unpkg · L8

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

vendor/desktop/lib/local/tools.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = aegiscode@6.5.1 matchedIdentity = npm:YWVnaXNjb2Rl:6.5.1 similarity = 0.720 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

vendor/desktop/lib/local/tools.jsView on unpkg

Source & flagged code

5 flagged · loading source

bin/aegiscode.jsView file

16L17: const path = require('node:path'); L18:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aegiscode.jsView on unpkg · L16

vendor/client/foreign-memory.jsView file

62/^<command-name>/i, L63: /^<local-command-stdout>/i, L64: /^\[Request interrupted by user/i, ... L73: function homeDir(home) { L74: return home || os.homedir(); L75: } ... L87: // L88: // `platform` is a parameter (not a bare `process.platform` read) so the L89: // Windows and macOS layouts stay unit-testable from Linux CI. ... L100: // home (tests, overrides) is the source of truth. L101: if (home === os.homedir() && process.env.APPDATA) return process.env.APPDATA; L102: return path.join(home, 'AppData', 'Roaming');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

vendor/client/foreign-memory.jsView on unpkg · L62

src/system.jsView file

Findings

3 High4 Medium6 Low

HighSandbox Evasion Gated Capabilitysrc/system.js

HighSemantic Analysis Limitedpackage.json

HighPrevious Version Dangerous Deltavendor/desktop/lib/local/tools.js

MediumDynamic Requirebin/aegiscode.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptovendor/client/foreign-memory.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to aegiscode@6.5.6.

See all versions of aegiscode for other recorded verdicts.

Review the evidence and your use of aegiscode@6.5.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-16 01:13:09.261Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.