registry / bazilion / 0.10.0

bazilion@0.10.0

⚠ Under review

Multi-agent runtime CLI — spawn LLM agents, manage profiles/teams/skills, and run the local daemon.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 156 file(s), 2.92 MB of source, external domains: 127.0.0.1, ai-gateway.vercel.sh, api.ant-ling.com, api.cerebras.ai, api.firecrawl.dev, api.groq.com, api.mistral.ai, api.moonshot.cn, api.openai.com, api.telegram.org, api.x.ai, bazilion.com, brave.com, fonts.googleapis.com, fonts.gstatic.com, github.com, integrate.api.nvidia.com, json-schema.org, mcp.example.com, open.bigmodel.cn, opencode.ai, openrouter.ai, raw.githubusercontent.com, react.dev, reactflow.dev, searxng.example.com, spec.openapis.org, stackoverflow.com, t.me, tanstack.com, token-plan-ams.xiaomimimo.com, token-plan-cn.xiaomimimo.com, token-plan-sgp.xiaomimimo.com, tools.ietf.org, www.safaribooksonline.com, www.w3.org

Source & flagged code

7 flagged

dist/web/server/assets/Sidebar-O_CH1-JD.jsView file

Lines 401-441javascript

401 };

402 }

403 async function review() {

404 setBusy(true);

405 setError(null);

406 setPreview(null);

407 try {

408 const { body } = await requestBody();

409 const response = await fetch(`/api/team-templates/${encodeURIComponent(team.id)}/spawn/preview`, {

410 method: "POST",

411 headers: { "content-type": "application/json" },

412 body: JSON.stringify(body)

413 });

414 if (!response.ok) throw new Error((await response.json().catch(() => null))?.error ?? response.statusText);

415 setPreview(await response.json());

416 } catch (cause) {

417 setError(cause.message);

418 } finally {

419 setBusy(false);

420 }

421 }

422 async function spawn() {

423 const target = teamId.trim();

High

Child Process

Package source references child process execution.

dist/web/server/assets/Sidebar-O_CH1-JD.jsView on unpkg · L421

424 if (!target) {

425 setError("target Team slug is required");

426 return;

427 }

428 setBusy(true);

429 setError(null);

430 try {

431 const { body } = await requestBody();

432 const response = await fetch(`/api/team-templates/${encodeURIComponent(team.id)}/spawn`, {

433 method: "POST",

434 headers: { "content-type": "application/json" },

435 body: JSON.stringify(body)

436 });

437 if (!response.ok) throw new Error((await response.json().catch(() => null))?.error ?? response.statusText);

438 onSpawned(target);

439 } catch (cause) {

440 setError(cause.message);

441 } finally {

dist/daemon.jsView file

48function checkPathExt(path, options) { L49: var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT; L50: if (!pathext) { ... L121: var core; L122: if (process.platform === "win32" || global.TESTING_WINDOWS) { L123: core = require_windows(); ... L137: } L138: return new Promise(function(resolve4, reject) { L139: isexe(path, options || {}, function(er, is) { ... L184: // windows always checks the cwd first L185: ...isWindows ? [process.cwd()] : [], L186: ...(opt.path || process.env.PATH || /* istanbul ignore next: very unusual */

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

dist/daemon.jsView on unpkg · L48

436parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`]; L437: parsed.command = process.env.comspec || "cmd.exe"; L438: parsed.options.windowsVerbatimArguments = true;

High

Shell

Package source references shell execution.

dist/daemon.jsView on unpkg · L436

14365sourceCode = this.opts.code.process(sourceCode, sch); L14366: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L14367: const validate2 = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/daemon.jsView on unpkg · L14365

dist/web-server.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

3// src/web-server.ts

4import { existsSync } from "fs";

5import { join } from "path";

6import { pathToFileURL } from "url";

dist/worker.jsView file

Lines 38-78javascript

38// ../daemon/src/core/profile/create.ts

39import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "fs";

40import { join as join4 } from "path";

42// ../daemon/src/core/skills/discover.ts

43import

dist/cli.jsView file

Lines 1-25javascript

1#!/usr/bin/env node

3// src/index.ts

4import { defineCommand as defineCommand25, runCommand, showUsage } from "citty";

6// package.json

7var package_default = {

8 name: "bazilion",

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code