registry / agentic-cortex / 4.4.0

agentic-cortex@4.4.0

Persistent typed memory for AI coding agents — install & forget: auto-inject context via git hooks, 13 memory types, confidence tracking, conflict detection, grounded QA, codebase graphs

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 330 KB of source, external domains: 127.0.0.1

Source & flagged code

3 flagged

src/core/hooks.jsView file

Lines 151-191javascript

151 break;

152 }

153 }

154}

155

156/**

157 * Evaluate a condition against observation/context.

158 */

159function evaluateCondition(type, value, observation, context) {

160 switch (type) {

161 case 'type_equals':

162 return observation.type === value;

163 case 'tag_contains':

164 try { return JSON.parse(observation.tags || '[]').includes(value); } catch { return false; }

165 case 'importance_gte':

166 return observation.importance >= parseInt(value, 10);

167 case 'project_equals':

168 return observation.project_path === value;

169 case 'custom_js':

170 // SECURITY: only allow if explicitly enabled via env

171 if (process.env.AGENTIC_CORTEX_HOOKS_JS !== '1') return false;

172 try { return new Function('obs', 'ctx', value)(observation, context); } catch { return false; }

173 default:

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/core/hooks.jsView on unpkg · L171

174 return true;

175 }

176}

177

178/**

179 * Simple template interpolation: {{field}} -> value from observation or context.

180 */

181function interpolate(str, observation, context) {

182 if (!str) return '';

183 return str.replace(/\{\{(\w+)\}\}/g, (_, key) => {

184 if (observation[key] !== undefined) return observation[key];

185 if (context && context[key] !== undefined) return context[key];

186 return '';

187 });

188}

189

190/**

191 * Persist a hook definition to the database.

cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2// agentic-cortex CLI — Persistent memory for AI coding agents.

3// Features: FTS5 search, BGE embeddings (768-dim), 13 typed memories,

4// confidence/provenance tracking, conflict detection, temporal queries,

5// grounded QA, file upload, daily summaries, Obsidian export.

6// No server, no port, no wrapper. Just: node cli.js <command> [args]

8const path = require('path');

scripts/cortex-hook.shView file

•path = scripts/cortex-hook.sh kind = build_helper sizeBytes = 7908 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/cortex-hook.shView on unpkg

Source & flagged code

3 flagged · loading source

src/core/hooks.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code