aegiscode@7.0.2

⚠ Under review

aegiscode — the command-line version of AEGIS Desktop. The shared tool surface in your shell, over the same thin transport and tool registry as the MCP plugin and the desktop app. Ships transport + UI only; no brain.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 111 file(s), 2.30 MB of source, external domains: 127.0.0.1, aegiscloud.org, api.anthropic.com, api.deepseek.com, api.groq.com, api.mistral.ai, api.openai.com, api.together.xyz, api.x.ai, code.visualstudio.com, cursor.com, docs.claude.com, docs.cline.bot, docs.continue.dev, docs.roocode.com, docs.windsurf.com, drive.google.com, generativelanguage.googleapis.com, github.com, opencode.ai, openrouter.ai, registry.npmjs.org, www.jetbrains.com, www.youtube.com, x.test, zed.dev

Source & flagged code

4 flagged

bin/aegiscode.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

2// SPDX-License-Identifier: AGPL-3.0-or-later

4// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin

5// Conveying a modified copy, or running one as a network service, owes the

6// corresponding source under this licence (§5/§13) — see LICENSING.md.

7'use strict';

9/**

10 * `aegiscode` — the AEGIS terminal host.

11 *

12 * Third host over the same two shared pieces the other two use: the thin

13 * transport (client/aegis.js) and the tool registry (mcp/tools.js). The MCP

14 * host answers a coding agent's tool calls; the desktop is a window; this is

15 * the shell. None of them owns a brain — routing, tiers, memory and billing all

16 * stay behind aegiscloud.org.

17 *

18 * This file is argument parsing and process lifecycle only. Everything

19 * testable lives in ../src/app.js.

20 */

22const path = require('node:path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aegiscode.jsView on unpkg · L21

24// A closed pipe is not a failure. `aegiscode --terminal | head`, PowerShell's

25// `| Select-Object -First 5`, and a pager the user quits all close the read end

26// while we still have lines to write, and the default unhandled `error` event

27// on stdout turns that into a stack trace over the answer. Every line of output

28// this host produces is disposable, so the first EPIPE ends the process cleanly.

29for (const stream of [process.stdout, process.stderr]) {

30 stream.on('error', (e) => {

31 if (e && (e.code === 'EPIPE' || e.code === 'ERR_STREAM_DESTROYED')) process.exit(0);

32 throw e;

33 });

34}

36const HELP = `aegiscode — AEGIS in your shell.

38Usage:

39 aegiscode interactive session

40 aegiscode "question" one-shot, then exit

41 aegiscode -p "question" same, explicit

vendor/desktop/lib/local/worktree-lock.jsView file

Lines 1-22javascript

1// SPDX-License-Identifier: AGPL-3.0-or-later

3// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin

4// Conveying a modified copy, or running one as a network service, owes the

Low

Weak Crypto

Package source references weak cryptographic algorithms.

vendor/desktop/lib/local/worktree-lock.jsView on unpkg · L2

5// corresponding source under this licence (§5/§13) — see LICENSING.md.

6'use strict';

8/**

src/system.jsView file

Lines 1-22javascript

1// SPDX-License-Identifier: AGPL-3.0-or-later

3// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin

4// Conveying a modified copy, or running one as a network service, owes the

5// corresponding source under this licence (§5/§13) — see LICENSING.md.

6'use strict';

8/**

9 * Small system helpers: best-effort URL opening (never blocks or errors) and

10 * a few constants shared by the support/easter-egg commands.

bin/aegiscode.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 32

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

bin/aegiscode.js#virtual:normalized:round1View on unpkg

Source & flagged code

4 flagged · loading source

bin/aegiscode.jsView file

21L22: const path = require('node:path'); L23:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/aegiscode.jsView on unpkg · L21

vendor/desktop/lib/local/worktree-lock.jsView file

2// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud. L3: // AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin L4: // Conveying a modified copy, or running one as a network service, owes the ... L62: function worktreeLockDir() { L63: if (process.env.AEGISCODE_WORKTREE_LOCK_DIR) return process.env.AEGISCODE_WORKTREE_LOCK_DIR; L64: if (process.env.AEGISCODEX_WORKTREE_LOCK_DIR) return process.env.AEGISCODEX_WORKTREE_LOCK_DIR; ... L66: || process.env.AEGISCODEX_HOME L67: || path.join(os.homedir(), '.aegiscode'); L68: return path.join(home, 'worktree-locks'); ... L105: function readHolder(root) { L106: try { return JSON.parse(fs.readFileSync(worktreeLockPath(root), 'utf8')); } catch { return null; } L107: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

vendor/desktop/lib/local/worktree-lock.jsView on unpkg · L2

Findings

2 High4 Medium7 Low

HighSandbox Evasion Gated Capabilitysrc/system.js

HighSemantic Analysis Limitedbin/aegiscode.js#virtual:normalized:round1

MediumDynamic Requirebin/aegiscode.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptovendor/desktop/lib/local/worktree-lock.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Affected versions and remediation

This report applies to aegiscode@7.0.2.

See all versions of aegiscode for other recorded verdicts.

Review the evidence and your use of aegiscode@7.0.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-13 02:42:31.571Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.