registry / artifakt / 0.1.2

artifakt@0.1.2

Artifakt — control what your AI ships. The open-source, vendor-neutral gate where a human reviews, approves, and owns AI-generated work. Point → Comment → Revise → Approve.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 184 file(s), 973 KB of source, external domains: 127.0.0.1, api.github.com, app.artifakthq.com, app.example.com, hooks.slack.com

Source & flagged code

6 flagged

bin/prepare-package.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// Build the standalone server the npm package ships (`artifakt` boots it directly —

3// no compilation inside node_modules, where SWC won't transpile). Run by prepack

4// after the overlay guard. Copies the static assets into the standalone layout

5// the server expects.

6import { spawnSync } from "node:child_process";

7import { cpSync, existsSync, rmSync } from "node:fs";

Source & flagged code

6 flagged · loading source

bin/prepare-package.mjsView file

5// the server expects. L6: import { spawnSync } from "node:child_process"; L7: import { cpSync, existsSync, rmSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/prepare-package.mjsView on unpkg · L5

12L13: const build = spawnSync("npx", ["next", "build"], { L14: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/prepare-package.mjsView on unpkg · L12

bin/artifakt.mjsView file

316const child = spawn(cmd, { L317: shell: true, L318: stdio: ["ignore", "pipe", "pipe"],

High

Shell

Package source references shell execution.

bin/artifakt.mjsView on unpkg · L316

52const NOTIFY_DIR = L53: process.env.ARTIFAKT_NOTIFY_DIR ?? join(homedir(), ".artifakt", "notifications"); L54: function envelopePath(artifactId) { ... L57: L58: const DEFAULT_CLOUD_URL = "https://app.artifakthq.com/api/mcp"; L59: L60: function run(command, args, opts = {}) { L61: const child = spawn(command, args, { L62: cwd: root,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/artifakt.mjsView on unpkg · L52

16*/ L17: import { spawn, spawnSync } from "node:child_process"; L18: import { fileURLToPath } from "node:url"; ... L31: L32: const __dirname = dirname(fileURLToPath(import.meta.url)); L33: const root = join(__dirname, ".."); ... L40: try { L41: return JSON.parse(readFileSync(RUNNER_CONFIG, "utf8")); L42: } catch { ... L52: const NOTIFY_DIR = L53: process.env.ARTIFAKT_NOTIFY_DIR ?? join(homedir(), ".artifakt", "notifications"); L54: function envelopePath(artifactId) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/artifakt.mjsView on unpkg · L16

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View file

•path = .next/standalone/.[redacted]-s.woff2 kind = high_entropy_blob sizeBytes = 4168 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2View on unpkg

Findings

6 High3 Medium5 Low

HighChild Processbin/prepare-package.mjs

HighShellbin/artifakt.mjs

HighSame File Env Network Executionbin/artifakt.mjs

HighSandbox Evasion Gated Capabilitybin/artifakt.mjs

HighRuntime Package Installbin/prepare-package.mjs

HighShips High Entropy Blob.next/standalone/.next/static/media/77fb5eec12c66d49-s.woff2

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

bin/artifakt.mjsView file

Lines 1-72javascript

1#!/usr/bin/env node

2/* Artifakt CLI.

3 * artifakt -> start the Artifakt web app (embedded PGlite, zero install)

4 * artifakt mcp -> run the MCP stdio server (your AI app spawns this)

5 * artifakt setup claude -> register Artifakt with Claude Desktop

6 * artifakt setup claude-code -> install the artifakt-review skill + print the connect command

7 * artifakt setup codex -> register Artifakt with Codex (+ drop the playbook)

8 * artifakt status -> what's under review from THIS project (the resume pointer)

9 * artifakt pair -> pair THIS computer to a workspace (browser approval;

10 * credential lands in ~/.artifakt/runner.json, no paste)

11 *

12 * LOCAL by default (the OSS zero-install loop — Decision 006/008). Cloud is opt-in by

13 * SIGNAL, not a flipped default: pass --token (mint one in Settings → Access tokens),

14 * optionally --url (defaults to the hosted app), or set ARTIFAKT_TOKEN. The cloud web app's

15 * "Connect your agent" page emits these commands for you. (First-time UX — Decision 022)

16 */

17import { spawn, spawnSync } from "node:child_process";

18import { fileURLToPath } from "node:url";

19import { dirname, join } from "node:path";

20import { homedir, hostname, platform } from "node:os";

21import { detectAgents, resolveWorkerTemplate } from "./agent-templates.mjs";

22import {

23 mkdirSync,

24 readFileSync,

25 writeFileSync,

26 existsSync,

27 copyFileSync,

28 readdirSync,

29 unlinkSync,

30} from "node:fs";

32const __dirname = dirname(fileURLToPath(import.meta.url));

33const root = join(__dirname, "..");

34const cmd = process.argv[2] ?? "start";

36// Paired-runner credential (artifakt pair): saved once per machine, then every

37// daemon on this computer authenticates without a token paste.

38const RUNNER_CONFIG = join(homedir(), ".artifakt", "runner.json");

39function loadRunnerConfig() {

40 try {

41 return JSON.parse(readFileSync(RUNNER_CONFIG, "utf8"));

42 } catch {

43 return null;

44 }

45}

47// Local notification channel (the resident lane): `artifakt listen --local` drops

48// one envelope file per undelivered round here; `artifakt wait-local` blocks on the

49// directory, prints the envelope, and consumes it. The file IS the handshake —

50// present = undelivered, gone = a session took it. Zero model tokens while idle

51// on both sides.

52const NOTIFY_DIR =

53 process.env.ARTIFAKT_NOTIFY_DIR ?? join(homedir(), ".artifakt", "notifications");

54function envelopePath(artifactId) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/artifakt.mjsView on unpkg · L16

55 return join(NOTIFY_DIR, `${artifactId}.json`);

56}

58const DEFAULT_CLOUD_URL = "https://app.artifakthq.com/api/mcp";

60function run(command, args, opts = {}) {

61 const child = spawn(command, args, {

62 cwd: root,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/artifakt.mjsView on unpkg · L52

63 stdio: "inherit",

64 shell: process.platform === "win32",

65 ...opts,

66 });

67 child.on("exit", (code) => process.exit(code ?? 0));

68}

70// Resolve local-vs-cloud from the signal: a token (flag or ARTIFAKT_TOKEN), --url, or

71// --cloud all mean cloud. Cloud needs a token; bail clearly if it's missing.

72function resolveTarget(args) {

Lines 296-336javascript

296 });

297 stream.on("end", () => {

298 if (buf) process.stdout.write(`[${tag}] ${buf}\n`);

299 });

300 }

301

302 // Resolve the worker template for one artifact and run it to completion. The

303 // wait poll is claim=0 (notify-only), so the worker's own get_feedback claims

304