registry / izanagi-ai / 2.9.1

izanagi-ai@2.9.1

Izanagi AI - Modular Skill-Oriented AI Prompt & Agent Framework for Autonomous Software Engineering

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 24 file(s), 152 KB of source, external domains: opencode.ai

Source & flagged code

5 flagged

dist/scripts/verify-build.jsView file

Lines 1-21javascript

1import { execSync } from 'child_process';

2import fs from 'fs';

High

Child Process

Package source references child process execution.

dist/scripts/verify-build.jsView on unpkg · L1

3import path from 'path';

4import { fileURLToPath, pathToFileURL } from 'url';

5const __filename = fileURLToPath(import.meta.url);

6const __dirname = path.dirname(__filename);

7const rootDir = path.resolve(__dirname, '..', '..');

8try {

9 console.log('\n\x1b[36m=== 🧪 Testando Instalação em Projeto Fictício ===\x1b[0m\n');

10 // 1. Garantir que o build está pronto

11 execSync('npm run build', { cwd: rootDir, stdio: 'inherit' });

12 // 2. Criar diretório sandbox de teste

13 const sandboxDir = path.join(rootDir, 'tmp-sandbox-test');

14 if (fs.existsSync(sandboxDir)) {

15 fs.rmSync(sandboxDir, { recursive: true, force: true });

16 }

17 fs.mkdirSync(sandboxDir, { recursive: true });

18 // 3. Executar instalador simulando projeto de usuário (instala todos os packs)

19 const installerPath = path.join(rootDir, 'dist', 'installer.js');

20 const installerUrl = pathToFileURL(installerPath).href;

21 const packIds = `['core','agents','skills','architecture','coding','database','devops','security','testing','memory','optimization','teaching']`;

dist/installer.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. export function resolveframeworkroot(cwd) { const projectagents = path.join(cwd, '.agents'); if (fs.existssync(projectagents)) { return projectagents; } return getpackagedir(); } export function installtoproject(targetdir, selectedpackids, clitarget) { const destinationroot = path.resolve(targetdir); const packagedir = getpackagedir(); const packids = array.from(new set([core_pack_id, ...selectedpackids])); const packs = packs.filter((p) => packids.includes(p.id)); if (!fs.existssync(destina

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/installer.jsView on unpkg

dist/scripts/build-clean.jsView file

Lines 1-23javascript

1import { execSync } from 'child_process';

2import fs from 'fs';

3import path from 'path';

4import { fileURLToPath } from 'url';

skills/ui-ux-pro-max/scripts/design_system.pyView file

•path = skills/ui-ux-pro-max/scripts/design_system.py kind = build_helper sizeBytes = 65173 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/ui-ux-pro-max/scripts/design_system.pyView on unpkg

skills/ui-ux-pro-max/scripts/tests/test_core.pyView file

•path = skills/ui-ux-pro-max/scripts/tests/test_core.py kind = payload_in_excluded_dir sizeBytes = 6035 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/ui-ux-pro-max/scripts/tests/test_core.pyView on unpkg

Source & flagged code

5 flagged · loading source

dist/scripts/verify-build.jsView file

1import { execSync } from 'child_process'; L2: import fs from 'fs';

izanagi-ai@2.9.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code