registry / codrix / 0.1.1

codrix@0.1.1

AI coding agent CLI

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 105 KB of source, external domains: api.openai.com

Source & flagged code

4 flagged

release/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{jsx as Pi}from"react/jsx-runtime";import{readFile as mn}from"node:fs/promises";var nr=class{tools=new Map;register(e){this.tools.set(e.name,e)}get(e){return this.tools.get(e)}getAll(){return[...this.tools.values()]}toDefinitions(){return[...this.tools.values()].map(e=>({type:"function",function:{name:e.name,description:e.description,parameters:{type:"object",properties:Object.fromEntries(Object.entries(e.parameters).map(([r,o])=>[r,{type:o.type,description:o.description,...o.enum&&{enum:o.enum},...o.properties&&{properties:o.properties},...o.items&&{items:o.items}}])),required:Object.en ...

3`),n=r.split(`

High

Child Process

Package source references child process execution.

release/index.jsView on unpkg · L1

4`),i=Math.max(o.length,n.length),s=[`--- ${t}`,`+++ ${t}`];for(let l=0;l<i;l++){let d=o[l],c=n[l];if(d===c){d!==void 0&&s.push(

5`)}function Kr(t,e){let r=e.split(`

6`);return[`--- ${t}`,"+++ /dev/null",...r.map(o=>`-${o}`)].join(`

7`)}var wn={name:"write_file",description:"Write content to a file at the given path, creating parent directories if needed",parameters:{path:{type:"string",description:"Absolute or relative path to the file to write"},content:{type:"string",description:"The content to write to the file"}},async execute(t){try{let e=ye(t.path);if(e.error)return{output:"",error:e.error};let r=t.content,o="",n=!0;try{o=await

9Diff:

10${qe(e.path,o,r)}`}}catch(e){return{output:"",error:`Failed to write file: ${e instanceof Error?e.message:String(e)}`}}}};W.register(wn);import{exec as bn}from"node:child_process";var yn=

11Process exited with code ${l.code}`.trim()}:{output:`${o?`[permission override used]

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

release/index.jsView on unpkg · L1

12`:""}${(d||"")+(c?`

13[stderr] ${c}`:"")}`})});e?.signal?.addEventListener("abort",()=>{s.kill()},{once:!0})})}};W.register(yn);import{readFile as _n,writeFile as Sn}from"node:fs/promises";var kn={name:"edit_file",description:"Find and replace a specific text in a file. The old_string must be unique (appear exactly once) in the file.",parameters:{path:{type:"string",description:"Path to the file to edit"},old_string:{type:"string",description:"The exact text to find (must appear exactly once in the file)"},new_string:{type:"string",description:"The text to replace old_string with"}},async execute(t){try{let e=ye(t. ...

15Diff:

16${qe(e.path,r,s)}`}}catch(e){return{output:"",error:`edit_file failed: ${e instanceof Error?e.message:String(e)}`}}}};W.register(kn);import{readFile as Tn,writeFile as vn}from"node:fs/promises"

17${n.join(`

18`)}

20Diff:

21${qe(e.path,r,o)}`}}catch(e){return{output:"",error:`multi_edit_file failed: ${e instanceof Error?e.message:String(e)}`}}}};W.register(Cn);import{readdir as Mn,readFile as $n,stat as Dn}from"node:fs/promises";import{resolve as En,join as Rn,relative as Nn}from"node:path";var An=1024*1024;async function qr(t,e,r,o,n,i){if(n.length>=i)return;let s;try{s=await Mn(t,{withFileTypes:!0})}catch{return}for(let l of s){if(n.length>=i)return;if(l.name==="node_modules"||l.name===".git"||l.name==="dist")continue;let d=Rn(t,l.name);if(l.isDirectory())await qr(d,e,r,o,n,i);else if(l.isFile()){if(r&&!r.test( ...

Long lines were clipped for display.

Lines 102-130javascript

102

103| Command | Description |

104|---|---|

105| /help | List all commands |

106| /sessions | List and select sessions |

107| /new | Start new session |

108| /model |

Source & flagged code

4 flagged · loading source

release/index.jsView file

High

Child Process

Package source references child process execution.

release/index.jsView on unpkg · L1

122--- END COMPACT --- L123: Continue from here.`,timestamp:Date.now()};return i([O]),t.loadConversation([{role:"user",content:O.content}]),Gt([]),de(`Compacted ${N} messages into summary`),!0}return h==="/exi... L124: \r

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

release/index.jsView on unpkg · L122

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

release/index.jsView on unpkg · L122

1#!/usr/bin/env node L2: import{jsx as Pi}from"react/jsx-runtime";import{readFile as mn}from"node:fs/promises";var nr=class{tools=new Map;register(e){this.tools.set(e.name,e)}get(e){return this.tools.get(e... L3: `),n=r.split(` ... L9: Diff: L10: ${qe(e.path,o,r)}`}}catch(e){return{output:"",error:`Failed to write file: ${e instanceof Error?e.message:String(e)}`}}}};W.register(wn);import{exec as bn}from"node:child_process";... L11: Process exited with code ${l.code}`.trim()}:{output:`${o?`[permission override used] ... L34: `+o.content.slice(-n)}})}buildToolGroups(e){let r=[],o=0;for(;o<e.length;){let n=e[o];if(n.role==="assistant"&&n.tool_calls&&n.tool_calls.length>0){let i=o,s=new Set(n.tool_calls.m... L35: `)}trim(e){let r=this.getAvailableBudget(),o=this.clampToolOutputs(e),n=this.estimateTotalTokens(o);if(n<=r)return{messages:o,trimmed:!1,removedCount:0,summaryInjected:!1};if(o.len... L36: L37: `).trim()}function Qn(t){let e=t.trim();return/^```(?:json)?\s*[\s\S]*?```$/i.test(e)||/^\{\s*"tool"\s*:/.test(e)||/^\[\s*\{\s*"tool"\s*:/.test(e)?"":t}var Je=class{provider;messag... L38: 1. ALWAYS use tools to get real data. Never guess, hallucinate, or make up file contents, comm

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

release/index.jsView on unpkg · L1

Findings

4 High3 Medium4 Low

HighChild Processrelease/index.js

HighSame File Env Network Executionrelease/index.js

HighCommand Output Exfiltrationrelease/index.js

HighSandbox Evasion Gated Capabilityrelease/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

release/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

3`),n=r.split(`

High

Child Process

Package source references child process execution.

release/index.jsView on unpkg · L1

4`),i=Math.max(o.length,n.length),s=[`--- ${t}`,`+++ ${t}`];for(let l=0;l<i;l++){let d=o[l],c=n[l];if(d===c){d!==void 0&&s.push(

5`)}function Kr(t,e){let r=e.split(`

6`);return[`--- ${t}`,"+++ /dev/null",...r.map(o=>`-${o}`)].join(`

9Diff:

10${qe(e.path,o,r)}`}}catch(e){return{output:"",error:`Failed to write file: ${e instanceof Error?e.message:String(e)}`}}}};W.register(wn);import{exec as bn}from"node:child_process";var yn=

11Process exited with code ${l.code}`.trim()}:{output:`${o?`[permission override used]

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

release/index.jsView on unpkg · L1

12`:""}${(d||"")+(c?`

15Diff:

16${qe(e.path,r,s)}`}}catch(e){return{output:"",error:`edit_file failed: ${e instanceof Error?e.message:String(e)}`}}}};W.register(kn);import{readFile as Tn,writeFile as vn}from"node:fs/promises"

17${n.join(`

18`)}

20Diff:

Long lines were clipped for display.

Lines 102-130javascript

102

103| Command | Description |

104|---|---|

105| /help | List all commands |

106| /sessions | List and select sessions |

107| /new | Start new session |

108| /model |