registry / agentic-cortex / 3.5.0

agentic-cortex@3.5.0

Persistent typed memory for AI coding agents — install & forget: auto-inject context via git hooks, 13 memory types, confidence tracking, conflict detection, grounded QA, codebase graphs

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 288 KB of source, external domains: 127.0.0.1

Source & flagged code

3 flagged

src/core/hooks.jsView file

Lines 144-184javascript

144 break;

145 }

146 }

147}

148

149/**

150 * Evaluate a condition against observation/context.

151 */

152function evaluateCondition(type, value, observation, context) {

153 switch (type) {

154 case 'type_equals':

155 return observation.type === value;

156 case 'tag_contains':

157 try { return JSON.parse(observation.tags || '[]').includes(value); } catch { return false; }

158 case 'importance_gte':

159 return observation.importance >= parseInt(value, 10);

160 case 'project_equals':

161 return observation.project_path === value;

162 case 'custom_js':

163 // SECURITY: only allow if explicitly enabled via env

164 if (process.env.AGENTIC_CORTEX_HOOKS_JS !== '1') return false;

165 try { return new Function('obs', 'ctx', value)(observation, context); } catch { return false; }

166 default:

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/core/hooks.jsView on unpkg · L164

167 return true;

168 }

169}

170

171/**

172 * Simple template interpolation: {{field}} -> value from observation or context.

173 */

174function interpolate(str, observation, context) {

175 if (!str) return '';

176 return str.replace(/\{\{(\w+)\}\}/g, (_, key) => {

177 if (observation[key] !== undefined) return observation[key];

178 if (context && context[key] !== undefined) return context[key];

179 return '';

180 });

181}

182

183/**

184 * Persist a hook definition to the database.

cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2// agentic-cortex CLI — Persistent memory for AI coding agents.

3// Features: FTS5 search, BGE embeddings (768-dim), 13 typed memories,

4// confidence/provenance tracking, conflict detection, temporal queries,

5// grounded QA, file upload, daily summaries, Obsidian export.

6// No server, no port, no wrapper. Just: node cli.js <command> [args]

8const path = require('path');

scripts/cortex-hook.shView file

•path = scripts/cortex-hook.sh kind = build_helper sizeBytes = 7908 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/cortex-hook.shView on unpkg

Source & flagged code

3 flagged · loading source

src/core/hooks.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code