registry / codrix / 0.1.3

codrix@0.1.3

AI coding agent CLI

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 106 KB of source, external domains: api.openai.com, registry.npmjs.org

Source & flagged code

4 flagged

release/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{jsx as Gi}from"react/jsx-runtime";import{readFile as _n}from"node:fs/promises";var nr=class{tools=new Map;register(e){this.tools.set(e.name,e)}get(e){return this.tools.get(e)}getAll(){return[...this.tools.values()]}toDefinitions(){return[...this.tools.values()].map(e=>({type:"function",function:{name:e.name,description:e.description,parameters:{type:"object",properties:Object.fromEntries(Object.entries(e.parameters).map(([r,o])=>[r,{type:o.type,description:o.description,...o.enum&&{enum:o.enum},...o.properties&&{properties:o.properties},...o.items&&{items:o.items}}])),required:Object.en ...

3`),n=r.split(`

High

Child Process

Package source references child process execution.

release/index.jsView on unpkg · L1

4`),s=Math.max(o.length,n.length),i=[`--- ${t}`,`+++ ${t}`];for(let l=0;l<s;l++){let d=o[l],c=n[l];if(d===c){d!==void 0&&i.push(

5`)}function Jr(t,e){let r=e.split(`

6`);return[`--- ${t}`,"+++ /dev/null",...r.map(o=>`-${o}`)].join(`

7`)}var Mn={name:"write_file",description:"Write content to a file at the given path, creating parent directories if needed",parameters:{path:{type:"string",description:"Absolute or relative path to the file to write"},content:{type:"string",description:"The content to write to the file"}},async execute(t){try{let e=_e(t.path);if(e.error)return{output:"",error:e.error};let r=t.content,o="",n=!0;try{o=await

9Diff:

10${Ke(e.path,o,r)}`}}catch(e){return{output:"",error:`Failed to write file: ${e instanceof Error?e.message:String(e)}`}}}};U.register(Mn);import{exec as $n}from"node:child_process";var Dn=

11Process exited with code ${l.code}`.trim()}:{output:`${o?`[permission override used]

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

release/index.jsView on unpkg · L1

12`:""}${(d||"")+(c?`

13[stderr] ${c}`:"")}`})});e?.signal?.addEventListener("abort",()=>{i.kill()},{once:!0})})}};U.register(Dn);import{readFile as En,writeFile as Nn}from"node:fs/promises";var Rn={name:"edit_file",description:"Find and replace a specific text in a file. The old_string must be unique (appear exactly once) in the file.",parameters:{path:{type:"string",description:"Path to the file to edit"},old_string:{type:"string",description:"The exact text to find (must appear exactly once in the file)"},new_string:{type:"string",description:"The text to replace old_string with"}},async execute(t){try{let e=_e(t. ...

15Diff:

16${Ke(e.path,r,i)}`}}catch(e){return{output:"",error:`edit_file failed: ${e instanceof Error?e.message:String(e)}`}}}};U.register(Rn);import{readFile as An,writeFile as On}from"node:fs/promises"

17${n.join(`

18`)}

20Diff:

21${Ke(e.path,r,o)}`}}catch(e){return{output:"",error:`multi_edit_file failed: ${e instanceof Error?e.message:String(e)}`}}}};U.register(In);import{readdir as Pn,readFile as Ln,stat as jn}from"node:fs/promises";import{resolve as Fn,join as Bn,relative as Un}from"node:path";var Wn=1024*1024;async function Gr(t,e,r,o,n,s){if(n.length>=s)return;let i;try{i=await Pn(t,{withFileTypes:!0})}catch{return}for(let l of i){if(n.length>=s)return;if(l.name==="node_modules"||l.name===".git"||l.name==="dist")continue;let d=Bn(t,l.name);if(l.isDirectory())await Gr(d,e,r,o,n,s);else if(l.isFile()){if(r&&!r.test( ...

Long lines were clipped for display.

Lines 56-130javascript

56[Agent stopped: tool call limit reached]`,i.tool_calls=void 0;break}this.messages.push(i);for(let c of i.tool_calls){if(this.cancelled)break;let y=JSON.stringify(c.arguments);r?.onToolStart?.(c.name,y);let x=await this.executeTool(c,r);r?.onToolEnd?.(c.name,x.error,x.output),this.messages.push({role:"tool",tool_call_id:c.id,content:x.error?`Error: ${x.error}`:x.output})}if(this.trimHistory(),r?.onLLMStart?.(),i=s?await this.streamRound(o,n,r):await this.completeRound(o,n,r),r?.onLLMEnd?.(),this.cancelled){i={role:"assistant",content:"[Agent cancelled]"};break}i=this.applyTextToolFallback(i)}re ...

57${d}`}catch(d){let c=d instanceof Error?d.message:String(d);return`## ${l.name}

58Error: ${c}`}}))).join

Source & flagged code

4 flagged · loading source

release/index.jsView file

High

Child Process

Package source references child process execution.

release/index.jsView on unpkg · L1

122--- END COMPACT --- L123: Continue from here.`,timestamp:Date.now()};return i([O]),t.loadConversation([{role:"user",content:O.content}]),de(`Compacted ${N} messages into summary`),!0}return h==="/exit"||h==... L124: \r

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

release/index.jsView on unpkg · L122

76${t.cause?String(t.cause):""}`:String(t);return/Network error|fetch failed|UND_ERR_SOCKET|ECONNRESET|ECONNREFUSED|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|socket|other side closed/i.test(e)}f... L77: Retried ${e} time${e===1?"":"s"} before failing.`)}import{jsx as E,jsxs as V,Fragment as Ri}from"react/jsx-runtime";import{Box as Z,Text as I,useApp as Ai,useInput as Oi,useStdout ... L78: `).map((c,y)=>He(Oe,{color:a.text,children:c},y))]})]})]})}import{jsx as ft,jsxs as Nt}from"react/jsx-runtime";import{Box as dr,Text as Xe}from"ink";import{useState as ro,useEffect... L79: `),_=p.length,v=_>ur,T=r&&!o&&v?p.slice(0,ur):r?p:[],k=_-ur;return Nt(dr,{flexDirection:"column",marginTop:1,children:[Nt(dr,{children:[ft(Xe,{color:"#d29922",bold:!0,children:b+":... L80: `).length,n=r?o:Math.min(o,mo);return 3+(e?n+(o>mo&&!r?1:0):0)}function Rs(t,e,r,o,n){if(t.length===0)return[{text:"",charStart:o,charEnd:o}];let s=[],i=!1,l=-1;for(let b=0;b<t.len... ... L82: `).replace(/\r/g,` L83: `)}function _o(t){if(t.startsWith("\x1B"))return!1;if(/[\r\n]/.test(t))return t.length>1;if(t.length<120)return!1;let r=new Set(t).size===1,o=/^(.{1,8})\1{8,}$/.test(t);return!r&&!... L84: `+T.slice(k)),b(k+1),k+1},Ot=T=>{

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

release/index.jsView on unpkg · L76

1#!/usr/bin/env node L2: import{jsx as Gi}from"react/jsx-runtime";import{readFile as _n}from"node:fs/promises";var nr=class{tools=new Map;register(e){this.tools.set(e.name,e)}get(e){return this.tools.get(e... L3: `),n=r.split(` ... L9: Diff: L10: ${Ke(e.path,o,r)}`}}catch(e){return{output:"",error:`Failed to write file: ${e instanceof Error?e.message:String(e)}`}}}};U.register(Mn);import{exec as $n}from"node:child_process";... L11: Process exited with code ${l.code}`.trim()}:{output:`${o?`[permission override used] ... L34: `+o.content.slice(-n)}})}buildToolGroups(e){let r=[],o=0;for(;o<e.length;){let n=e[o];if(n.role==="assistant"&&n.tool_calls&&n.tool_calls.length>0){let s=o,i=new Set(n.tool_calls.m... L35: `)}trim(e){let r=this.getAvailableBudget(),o=this.clampToolOutputs(e),n=this.estimateTotalTokens(o);if(n<=r)return{messages:o,trimmed:!1,removedCount:0,summaryInjected:!1};if(o.len... L36: L37: `).trim()}function ls(t){let e=t.trim();return/^```(?:json)?\s*[\s\S]*?```$/i.test(e)||/^\{\s*"tool"\s*:/.test(e)||/^\[\s*\{\s*"tool"\s*:/.test(e)?"":t}var qe=class{provider;messag... L38: 1. ALWAYS use tools to get real data. Never guess, hallucinate, or make up file contents, comm

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

release/index.jsView on unpkg · L1

Findings

4 High3 Medium4 Low

HighChild Processrelease/index.js

HighSame File Env Network Executionrelease/index.js

HighCommand Output Exfiltrationrelease/index.js

HighSandbox Evasion Gated Capabilityrelease/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

release/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

3`),n=r.split(`

High

Child Process

Package source references child process execution.

release/index.jsView on unpkg · L1

4`),s=Math.max(o.length,n.length),i=[`--- ${t}`,`+++ ${t}`];for(let l=0;l<s;l++){let d=o[l],c=n[l];if(d===c){d!==void 0&&i.push(

5`)}function Jr(t,e){let r=e.split(`

6`);return[`--- ${t}`,"+++ /dev/null",...r.map(o=>`-${o}`)].join(`

9Diff:

10${Ke(e.path,o,r)}`}}catch(e){return{output:"",error:`Failed to write file: ${e instanceof Error?e.message:String(e)}`}}}};U.register(Mn);import{exec as $n}from"node:child_process";var Dn=

11Process exited with code ${l.code}`.trim()}:{output:`${o?`[permission override used]

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

release/index.jsView on unpkg · L1

12`:""}${(d||"")+(c?`

15Diff:

16${Ke(e.path,r,i)}`}}catch(e){return{output:"",error:`edit_file failed: ${e instanceof Error?e.message:String(e)}`}}}};U.register(Rn);import{readFile as An,writeFile as On}from"node:fs/promises"

17${n.join(`

18`)}

20Diff:

Long lines were clipped for display.

Lines 56-130javascript

57${d}`}catch(d){let c=d instanceof Error?d.message:String(d);return`## ${l.name}

58Error: ${c}`}}))).join