registry / forge-executor / 2.0.2

forge-executor@2.0.2

Forge Executor — autonomous multi-LLM engineering harness: milestones, dialectic reviews, aptitude-based routing (Claude, GPT, Grok) with markdown-as-truth state

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,246 file(s), 11.3 MB of source, external domains: 10.0.0.5, 127.0.0.1, 192.168.1.1, ai-gateway.vercel.sh, antigravity.google, api-dashboard.search.brave.com, api.anthropic.com, api.cerebras.ai, api.cloudflare.com, api.deepseek.com, api.fireworks.ai, api.github.com, api.groq.com, api.individual.githubcopilot.com, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.search.brave.com, api.tavily.com, api.telegram.org, api.together.ai, api.x.ai, api.xiaomimimo.com, api.z.ai, auth.openai.com, bedrock-runtime.eu-central-1.amazonaws.com, bedrock-runtime.us-east-1.amazonaws.com, chatgpt.com, claude.ai, cli.github.com, context7.com, discord.com, example.com, example.dev, example.test, exemplo.dev, fake.gsd.local, gateway.ai.cloudflare.com, generativelanguage.googleapis.com, git-scm.com, github.com, my-proxy.example.com, ollama.com, opencode.ai, opengsd.net, openrouter.ai

Source & flagged code

7 flagged

package.jsonView file

Lines 83-123json

83 "verify:pi-patches": "node scripts/verify-pi-patches.cjs",

84 "test:pi-claude-schemas": "pnpm exec vitest run packages/pi-ai/test/google-shared-convert-tools.test.ts && node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test src/resources/extensions/gsd/tests/claude-tool-schema-golden.test.ts",

85 "test:marketplace": "node scripts/with-env.mjs GSD_TEST_CLONE_MARKETPLACES=1 -- node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test src/resources/extensions/gsd/tests/claude-import-tui.test.ts src/resources/extensions/gsd/tests/plugin-importer-live.test.ts src/tests/marketplace-discovery.test.ts",

86 "test:coverage": "cross-env NODE_OPTIONS=--max-old-space-size=8192 c8 --reporter=text --reporter=lcov --exclude=\"src/resources/extensions/gsd/tests/**\" --exclude=\"src/tests/**\" --exclude=\"scripts/**\" --exclude=\"native/**\" --exclude=\"node_modules/**\" --check-coverage --statements=40 --lines=40 --branches=20 --functions=20 node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --experimental-test-isolation=process --test src/resources/extensions/gsd/tests/*.test.ts src/resources/extensions/gsd/tests/*.test.mjs src/tests/*.test.ts src/resources/ ...

87 "test:integration": "node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test --test-timeout=180000 \"src/tests/integration/*.test.ts\" \"src/resources/extensions/gsd/tests/integration/*.test.ts\" \"src/resources/extensions/async-jobs/*.test.ts\" \"src/resources/extensions/ollama/**/*.test.ts\" \"src/resources/extensions/ollama/*.test.ts\" \"src/resources/extensions/search-the-web/tests/*.test.ts\" \"src/resources/extensions/bg-shell/tests/*.test.ts\" \"src/resources/extensions/slash-commands/tests/*.test.ts\" \"src/resources/extensions/browser-to ...

88 "pretest": "pnpm run typecheck:extensions",

89 "test": "pnpm run test:unit && pnpm run test:integration && pnpm run test:packages",

90 "test:smoke": "node --experimental-strip-types tests/smoke/run.ts",

91 "test:live": "node scripts/with-env.mjs GSD_LIVE_TESTS=1 -- node --experimental-strip-types tests/live/run.ts",

92 "test:live-workflow": "node --experimental-strip-types tests/live-workflow/run.ts",

93 "test:browser-tools": "node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test src/resources/extensions/browser-tools/tests/browser-tools-unit.test.cjs src/resources/extensions/browser-tools/tests/browser-engine-selection.test.mjs src/resources/extensions/browser-tools/tests/managed-gsd-browser-tools.test.mjs src/resources/extensions/browser-tools/tests/browser-tools-integration.test.mjs",

94 "test:native": "pnpm --filter @gsd/native run test",

95 "test:secret-scan": "node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test src/tests/secret-scan.test.ts",

96 "secret-scan": "node scripts/secret-scan.mjs",

97 "secret-scan:install-hook": "node scripts/install-hooks.mjs",

98 "build:native": "node native/scripts/build.js",

99 "build:native:dev": "node native/scripts/build.js --dev",

100 "dev": "node scripts/dev.js",

101 "gsd": "node scripts/dev-cli.js",

102 "update:gsd-browser": "node scripts/update-gsd-browser-local.mjs",

103 "postinstall": "node scripts/install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L103

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L103

104 "pi:install-global": "node scripts/install-pi-global.js",

105 "pi:uninstall-global": "node scripts/uninstall-pi-global.js",

106 "sync-pkg-version": "node scripts/sync-pkg-version.cjs",

107 "sync-platform-versions": "node native/scripts/sync-platform-versions.cjs",

108 "verify:native-platform-packages": "node scripts/verify-native-platform-packages.mjs",

109 "verify:npm-release": "node scripts/verify-npm-release.mjs",

110 "verify:version-sync": "node scripts/verify-version-sync.cjs",

111 "validate-pack": "node scripts/validate-pack.js",

112 "prepack": "node scripts/prepack-resolve-workspace.cjs",

113 "postpack": "node scripts/postpack-restore-workspace.cjs",

114 "typecheck:extensions": "tsc --noEmit --project tsconfig.extensions.json",

115 "audit:test-confidence": "node scripts/audit-test-confidence.mjs",

116 "audit:test-gaps": "node scripts/audit-test-gaps.mjs",

117 "audit:test-matrix": "node scripts/audit-test-matrix.mjs",

118 "test:evaluation": "node scripts/run-test-evaluation.mjs",

119 "test:coverage:unit": "cross-env NODE_OPTIONS=--max-old-space-size=8192 c8 --reporter=lcovonly --report-dir=coverage/unit --temp-directory=coverage/.tmp-unit --exclude=\"**/*.test.*\" --exclude=\"**/tests/**\" --exclude=\"**/test/**\" --all node --import ./scripts/dist-test-resolve.mjs --experimental-test-isolation=process --test \"dist-test/src/tests/*.test.js\" \"dist-test/src/resources/extensions/gsd/tests/*.test.js\" \"dist-test/src/resources/extensions/gsd/tests/*.test.mjs\" \"dist-test/src/resources/extensions/shared/tests/*.test.js\" \"dist-test/src/resources/extensions/subagent/tes ...

120 "test:coverage:integration": "pnpm exec playwright install chromium && cross-env NODE_OPTIONS=--max-old-space-size=8192 c8 --reporter=lcovonly --report-dir=coverage/integration --temp-directory=coverage/.tmp-integration --exclude=\"**/*.test.*\" --exclude=\"**/tests/**\" --all node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test --test-timeout=180000 \"src/tests/integration/*.test.ts\" \"src/resources/extensions/gsd/tests/integration/*.test.ts\" \"src/resources/extensions/async-jobs/*.test.ts\" \"src/resources/extensions/ollama/**/*.test.ts\" ...

121 "test:coverage:packages": "node scripts/run-coverage-packages.mjs",

122 "test:coverage:merge": "node scripts/merge-coverage-reports.mjs",

123 "test:coverage:full": "pnpm run test:compile && pnpm run test:coverage:unit && pnpm run test:coverage:integration && pnpm run test:coverage:packages && pnpm run test:coverage:merge",

Long lines were clipped for display.

dist/resources/extensions/bg-shell/bg-shell-lifecycle.jsView file

Lines 3-43javascript

3 * context injection, process discovery, footer widget, and periodic maintenance.

4 */

5import { truncateToWidth, visibleWidth, } from "@gsd/pi-tui";

6import { processes, pendingAlerts, pushAlert, cleanupAll, cleanupSessionProcesses, persistManifest, loadManifest, pruneDeadProcesses, } from "./process-manager.js";

7import { formatUptime, getBgShellLiveCwd, resolveBgShellPersistenceCwd } from "./utilities.js";

8import

src/resources/extensions/browser-tools/tests/browser-tools-unit.test.cjsView file

Lines 126-166javascript

126// ---------------------------------------------------------------------------

127// utils.ts — staleRefGuidance

128// ---------------------------------------------------------------------------

129

130describe("staleRefGuidance", () => {

131 it("includes the ref display and reason", () => {

132 const result

dist/resources/extensions/claude-code-cli/stream-adapter.jsView file

Lines 1-31javascript

1// gsd-pi - Claude Code CLI provider stream adapter

2/**

3 * Stream adapter: bridges the Claude Agent SDK into GSD's streamSimple contract.

4 *

5 * The SDK runs the full agentic loop (multi-turn, tool execution, compaction)

6 * in one call. This adapter translates the SDK's streaming output into

7 * AssistantMessageEvents for TUI rendering, then preserves externally executed

8 * tool-call blocks on the final AssistantMessage so Agent Core can render them

9 * while `externalToolExecution` prevents local redispatch.

10 */

dist/resources/extensions/voice/speech-recognizer.pyView file

•path = [redacted]-recognizer.py kind = build_helper sizeBytes = 16970 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/resources/extensions/voice/speech-recognizer.pyView on unpkg

src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.pyView file

•path = src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.py kind = payload_in_excluded_dir sizeBytes = 24877 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.pyView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/resources/extensions/bg-shell/bg-shell-lifecycle.jsView file

23try { L24: const { listDescendants } = require("@gsd/native"); L25: const descendants = listDescendants(process.pid);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/resources/extensions/bg-shell/bg-shell-lifecycle.jsView on unpkg · L23

src/resources/extensions/browser-tools/tests/browser-tools-unit.test.cjsView file

146const mockState = { L147: url: "http://localhost:3000/dashboard", L148: title: "Dashboard", ... L480: const contextRoot = mkdtempSync(join(tmpdir(), "browser-tools-context-")); L481: const previousCwd = process.cwd(); L482: t.after(() => {

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/resources/extensions/browser-tools/tests/browser-tools-unit.test.cjsView on unpkg · L146

dist/resources/extensions/claude-code-cli/stream-adapter.jsView file

11import { EventStream } from "@gsd/pi-ai"; L12: import { execSync } from "node:child_process"; L13: import { createHash } from "node:crypto"; ... L39: export function resolveClaudeCodeCwd(options) { L40: return options?.cwd && options.cwd.trim().length > 0 ? options.cwd : process.cwd(); L41: } ... L44: /** Regex pattern that identifies field names and descriptions that should be treated as sensitive/secure inputs. */ L45: const SENSITIVE_FIELD_PATTERN = /(password|passphrase|secret|token|api[_\s-]*key|private[_\s-]*key|credential)/i; L46: /** Mirrors @opengsd/mcp-server's ask_user_questions host elicitation timeout. */ ... L97: /** Return the shell command used to locate the `claude` binary on the given platform. */ L98: export function getClaudeLookupCommand(platform = process.platform) { L99: return platform === "win32" ? "where claude" : "which claude";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/resources/extensions/claude-code-cli/stream-adapter.jsView on unpkg · L11

dist/resources/extensions/voice/speech-recognizer.pyView file

•path = [redacted]-recognizer.py kind = build_helper sizeBytes = 16970 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/resources/extensions/voice/speech-recognizer.pyView on unpkg

src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.pyView file

•path = src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.py kind = payload_in_excluded_dir sizeBytes = 24877 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.pyView on unpkg

Findings

2 High7 Medium7 Low

HighInstall Time Lifecycle Scriptspackage.json

HighPayload In Excluded Dirsrc/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.py

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/resources/extensions/bg-shell/bg-shell-lifecycle.js

MediumUnsafe Vm Contextsrc/resources/extensions/browser-tools/tests/browser-tools-unit.test.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/resources/extensions/voice/speech-recognizer.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/resources/extensions/claude-code-cli/stream-adapter.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

package.jsonView file

Lines 83-123json

83 "verify:pi-patches": "node scripts/verify-pi-patches.cjs",

88 "pretest": "pnpm run typecheck:extensions",

89 "test": "pnpm run test:unit && pnpm run test:integration && pnpm run test:packages",

90 "test:smoke": "node --experimental-strip-types tests/smoke/run.ts",

91 "test:live": "node scripts/with-env.mjs GSD_LIVE_TESTS=1 -- node --experimental-strip-types tests/live/run.ts",

92 "test:live-workflow": "node --experimental-strip-types tests/live-workflow/run.ts",

94 "test:native": "pnpm --filter @gsd/native run test",

95 "test:secret-scan": "node --import ./src/resources/extensions/gsd/tests/resolve-ts.mjs --experimental-strip-types --test src/tests/secret-scan.test.ts",

96 "secret-scan": "node scripts/secret-scan.mjs",

97 "secret-scan:install-hook": "node scripts/install-hooks.mjs",

98 "build:native": "node native/scripts/build.js",

99 "build:native:dev": "node native/scripts/build.js --dev",

100 "dev": "node scripts/dev.js",

101 "gsd": "node scripts/dev-cli.js",

102 "update:gsd-browser": "node scripts/update-gsd-browser-local.mjs",

103 "postinstall": "node scripts/install.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L103

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L103

104 "pi:install-global": "node scripts/install-pi-global.js",

105 "pi:uninstall-global": "node scripts/uninstall-pi-global.js",

106 "sync-pkg-version": "node scripts/sync-pkg-version.cjs",

107 "sync-platform-versions": "node native/scripts/sync-platform-versions.cjs",

108 "verify:native-platform-packages": "node scripts/verify-native-platform-packages.mjs",

109 "verify:npm-release": "node scripts/verify-npm-release.mjs",

110 "verify:version-sync": "node scripts/verify-version-sync.cjs",

111 "validate-pack": "node scripts/validate-pack.js",

112 "prepack": "node scripts/prepack-resolve-workspace.cjs",

113 "postpack": "node scripts/postpack-restore-workspace.cjs",

114 "typecheck:extensions": "tsc --noEmit --project tsconfig.extensions.json",

115 "audit:test-confidence": "node scripts/audit-test-confidence.mjs",

116 "audit:test-gaps": "node scripts/audit-test-gaps.mjs",

117 "audit:test-matrix": "node scripts/audit-test-matrix.mjs",

118 "test:evaluation": "node scripts/run-test-evaluation.mjs",

121 "test:coverage:packages": "node scripts/run-coverage-packages.mjs",

122 "test:coverage:merge": "node scripts/merge-coverage-reports.mjs",

123 "test:coverage:full": "pnpm run test:compile && pnpm run test:coverage:unit && pnpm run test:coverage:integration && pnpm run test:coverage:packages && pnpm run test:coverage:merge",

Long lines were clipped for display.

dist/resources/extensions/bg-shell/bg-shell-lifecycle.jsView file

Lines 3-43javascript

3 * context injection, process discovery, footer widget, and periodic maintenance.

4 */

5import { truncateToWidth, visibleWidth, } from "@gsd/pi-tui";

6import { processes, pendingAlerts, pushAlert, cleanupAll, cleanupSessionProcesses, persistManifest, loadManifest, pruneDeadProcesses, } from "./process-manager.js";

7import { formatUptime, getBgShellLiveCwd, resolveBgShellPersistenceCwd } from "./utilities.js";

8import

src/resources/extensions/browser-tools/tests/browser-tools-unit.test.cjsView file

Lines 126-166javascript

126// ---------------------------------------------------------------------------

127// utils.ts — staleRefGuidance

128// ---------------------------------------------------------------------------

129

130describe("staleRefGuidance", () => {

131 it("includes the ref display and reason", () => {

132 const result

dist/resources/extensions/claude-code-cli/stream-adapter.jsView file

Lines 1-31javascript

1// gsd-pi - Claude Code CLI provider stream adapter

2/**

3 * Stream adapter: bridges the Claude Agent SDK into GSD's streamSimple contract.

4 *

5 * The SDK runs the full agentic loop (multi-turn, tool execution, compaction)

6 * in one call. This adapter translates the SDK's streaming output into

7 * AssistantMessageEvents for TUI rendering, then preserves externally executed

8 * tool-call blocks on the final AssistantMessage so Agent Core can render them

9 * while `externalToolExecution` prevents local redispatch.

10 */

dist/resources/extensions/voice/speech-recognizer.pyView file

•path = [redacted]-recognizer.py kind = build_helper sizeBytes = 16970 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/resources/extensions/voice/speech-recognizer.pyView on unpkg

src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.pyView file

•path = src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.py kind = payload_in_excluded_dir sizeBytes = 24877 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

src/resources/skills/github-workflows/references/gh/tests/test_github_project_setup.pyView on unpkg