registry / artifakt / 0.1.2

artifakt@0.1.2

Artifakt — control what your AI ships. The open-source, vendor-neutral gate where a human reviews, approves, and owns AI-generated work. Point → Comment → Revise → Approve.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 184 file(s), 973 KB of source, external domains: 127.0.0.1, api.github.com, app.artifakthq.com, app.example.com, hooks.slack.com

Source & flagged code

6 flagged

bin/prepare-package.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// Build the standalone server the npm package ships (`artifakt` boots it directly —

3// no compilation inside node_modules, where SWC won't transpile). Run by prepack

4// after the overlay guard. Copies the static assets into the standalone layout

5// the server expects.

6import { spawnSync } from "node:child_process";

7import { cpSync, existsSync, rmSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/prepare-package.mjsView on unpkg · L5

8import { fileURLToPath } from "node:url";

9import { dirname, join } from "node:path";

11const root = join(dirname(fileURLToPath(import.meta.url)), "..");

13const build = spawnSync("npx", ["next", "build"], {

14 cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/prepare-package.mjsView on unpkg · L12

15 stdio: "inherit",

16 shell: process.platform === "win32",

17});

18if (build.status !== 0) process.exit(build.status ?? 1);

20const standalone = join(root, ".next", "standalone");

21if (!existsSync(join(standalone, "server.js"))) {

22 console.error("prepare-package: no standalone server produced — check next.config output");

23 process.exit(1);

24}

25rmSync(join(standalone, ".next", "static"), { recursive: true, force: true });

26cpSync(join(root, ".next", "static"), join(standalone, ".next", "static"), {

27 recursive: true,

28});

29cpSync(join(root, "public"), join(standalone, "public"), { recursive: true });

30console.log("✓ standalone server prepared for packaging");

bin/artifakt.mjsView file

Lines 1-72javascript

1#!/usr/bin/env node

2/* Artifakt CLI.

3 * artifakt -> start the Artifakt web app (embedded PGlite, zero install)

4 * artifakt mcp -> run the MCP stdio server (your AI app spawns this)

5 * artifakt setup claude -> register Artifakt with Claude Desktop

6 * artifakt setup claude-code -> install the artifakt-review skill + print the connect command

7 * artifakt setup codex -> register Artifakt with Codex (+ drop the playbook)

8 * artifakt status -> what's under review from THIS project (the resume pointer)

9 * artifakt pair -> pair THIS computer to a workspace (browser approval;

10 * credential lands in ~/.artifakt/runner.json, no paste)

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View file

•path = .next/standalone/.[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4168 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View on unpkg

Source & flagged code

6 flagged · loading source

bin/prepare-package.mjsView file

5// the server expects. L6: import { spawnSync } from "node:child_process"; L7: import { cpSync, existsSync, rmSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/prepare-package.mjsView on unpkg · L5

12L13: const build = spawnSync("npx", ["next", "build"], { L14: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/prepare-package.mjsView on unpkg · L12

bin/artifakt.mjsView file

316const child = spawn(cmd, { L317: shell: true, L318: stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

bin/artifakt.mjsView on unpkg · L316

52const NOTIFY_DIR = L53: process.env.ARTIFAKT_NOTIFY_DIR ?? join(homedir(), ".artifakt", "notifications"); L54: function envelopePath(artifactId) { ... L57: L58: const DEFAULT_CLOUD_URL = "https://app.artifakthq.com/api/mcp"; L59: L60: function run(command, args, opts = {}) { L61: const child = spawn(command, args, { L62: cwd: root,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/artifakt.mjsView on unpkg · L52

16*/ L17: import { spawn, spawnSync } from "node:child_process"; L18: import { fileURLToPath } from "node:url"; ... L31: L32: const __dirname = dirname(fileURLToPath(import.meta.url)); L33: const root = join(__dirname, ".."); ... L40: try { L41: return JSON.parse(readFileSync(RUNNER_CONFIG, "utf8")); L42: } catch { ... L52: const NOTIFY_DIR = L53: process.env.ARTIFAKT_NOTIFY_DIR ?? join(homedir(), ".artifakt", "notifications"); L54: function envelopePath(artifactId) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/artifakt.mjsView on unpkg · L16

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View file

•path = .next/standalone/.[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4168 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View on unpkg

Findings

6 High3 Medium5 Low

HighChild Processbin/prepare-package.mjs

HighShellbin/artifakt.mjs

HighSame File Env Network Executionbin/artifakt.mjs

HighSandbox Evasion Gated Capabilitybin/artifakt.mjs

HighRuntime Package Installbin/prepare-package.mjs

HighShips High Entropy Blob.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

6 flagged

bin/prepare-package.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// Build the standalone server the npm package ships (`artifakt` boots it directly —

3// no compilation inside node_modules, where SWC won't transpile). Run by prepack

4// after the overlay guard. Copies the static assets into the standalone layout

5// the server expects.

6import { spawnSync } from "node:child_process";

7import { cpSync, existsSync, rmSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/prepare-package.mjsView on unpkg · L5

8import { fileURLToPath } from "node:url";

9import { dirname, join } from "node:path";

11const root = join(dirname(fileURLToPath(import.meta.url)), "..");

13const build = spawnSync("npx", ["next", "build"], {

14 cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/prepare-package.mjsView on unpkg · L12

15 stdio: "inherit",

16 shell: process.platform === "win32",

17});

18if (build.status !== 0) process.exit(build.status ?? 1);

20const standalone = join(root, ".next", "standalone");

21if (!existsSync(join(standalone, "server.js"))) {

22 console.error("prepare-package: no standalone server produced — check next.config output");

23 process.exit(1);

24}

25rmSync(join(standalone, ".next", "static"), { recursive: true, force: true });

26cpSync(join(root, ".next", "static"), join(standalone, ".next", "static"), {

27 recursive: true,

28});

29cpSync(join(root, "public"), join(standalone, "public"), { recursive: true });

30console.log("✓ standalone server prepared for packaging");

bin/artifakt.mjsView file

Lines 1-72javascript

1#!/usr/bin/env node

2/* Artifakt CLI.

3 * artifakt -> start the Artifakt web app (embedded PGlite, zero install)

4 * artifakt mcp -> run the MCP stdio server (your AI app spawns this)

5 * artifakt setup claude -> register Artifakt with Claude Desktop

6 * artifakt setup claude-code -> install the artifakt-review skill + print the connect command

7 * artifakt setup codex -> register Artifakt with Codex (+ drop the playbook)

8 * artifakt status -> what's under review from THIS project (the resume pointer)

9 * artifakt pair -> pair THIS computer to a workspace (browser approval;

10 * credential lands in ~/.artifakt/runner.json, no paste)

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View file

•path = .next/standalone/.[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4168 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View on unpkg

Lines 296-336javascript

296 });

297 stream.on("end", () => {

298 if (buf) process.stdout.write(`[${tag}] ${buf}\n`);

299 });

300 }

301

302 // Resolve the worker template for one artifact and run it to completion. The

303 // wait poll is claim=0 (notify-only), so the worker's own get_feedback claims

304 // the round; we must finish it before re-polling or the same round re-reports.

305 async function spawnWorker(artId, override) {

306 const tag = artId.slice(0, 8);

307 const { agent, template } = resolveWorkerTemplate({

308 armedAgent: override ?? null,

309 defaultAgent: runnerDefaultAgent,

310 detected: detectedAgents,

311 });

312 const cmd = (flags.runtime ?? template).replaceAll("{id}", artId);

313 console.log(`[${new Date().toLocaleTimeString()}] ${tag} feedback → ${agent} booting…`);

314 await reportLifecycle(artId, agent, "spawning", true);

315 return await new Promise((resolve) => {

316 const child = spawn(cmd, {

317 shell: true,

318 stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

bin/artifakt.mjsView on unpkg · L316

319 env: process.env,

320 });

321 prefixPipe(child.stdout, tag);

322 prefixPipe(child.stderr, tag);

323 child.on("error", async (e) => {

324 console.error(`[${tag}] worker failed to start: ${e?.message ?? e}`);

325 await reportLifecycle(artId, agent, "exited", false);

326 resolve(false);

327 });

328 child.on("exit", async (code) => {

329 console.log(`[${new Date().toLocaleTimeString()}] ${tag} ${agent} exited (${code ?? "?"}).`);

330 await reportLifecycle(artId, agent, "exited", code === 0);

331 resolve(code === 0);

332 });

333 });

334 }

335

336 // One worker session PER ARMED ARTIFACT (resident lane, tmux): dedicated