registry / kenkeep / 1.11.3

kenkeep@1.11.3

Builds and maintains a per-repo knowledge base from AI coding sessions, for Claude Code, OpenAI Codex CLI, Cursor, OpenCode, and GitHub Copilot CLI.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 49 file(s), 18.4 MB of source, external domains: api.github.com, github.com, opencode.ai

Source & flagged code

6 flagged

dist/plugins/opencode/kk.mjsView file

Lines 1-23javascript

1// kenkeep plugin

3// src/harnesses/opencode/plugins/kk.ts

4import { spawn } from "child_process";

5import { join } from "path";

High

Child Process

Package source references child process execution.

dist/plugins/opencode/kk.mjsView on unpkg · L3

6var DISPATCH = {

7 "session.created": ["kk-session-start.cjs", "kk-proposal-drain.cjs"],

8 "session.idle": ["kk-capture.cjs", "kk-lint-tick.cjs"]

9};

10var kk_default = async (input) => {

11 if (process.env["KENKEEP_BUILDER_INTERNAL"] === "1") return {};

12 const projectDir = input.directory ?? input.project?.worktree ?? process.cwd();

13 const kkHooks = join(projectDir, ".ai", "kenkeep", "hooks", "opencode");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/plugins/opencode/kk.mjsView on unpkg · L3

14 return {

15 event: async ({ event }) => {

16 if (!event.type) return;

17 const scripts = DISPATCH[event.type];

18 if (!scripts) return;

19 const payload = JSON.stringify({

20 session_id: event.properties?.sessionID,

21 hook_event_name: event.type === "session.created" ? "SessionCreated" : "SessionIdle",

22 cwd: projectDir

23 });

dist/cli.jsView file

Lines 505-545javascript

505 if (missingRegs.length === 0 && missingFiles.size === 0) {

506 return ok("all expected hook entries and scripts present");

507 }

508 const parts = [];

509 if (missingRegs.

dist/hooks/copilot/kk-session-start.cjsView file

Lines 281-321javascript

281 }

282 if (line.charAt(delim.length + 1) === delim.slice(-1)) {

283 return false;

284 }

285 return true;

Source & flagged code

6 flagged · loading source

dist/plugins/opencode/kk.mjsView file

3// [redacted].ts L4: import { spawn } from "child_process"; L5: import { join } from "path";

High

Child Process

Package source references child process execution.

dist/plugins/opencode/kk.mjsView on unpkg · L3

3Cross-file remote execution chain: dist/plugins/opencode/kk.mjs spawns dist/hooks/copilot/kk-session-start.cjs; helper contains network access plus dynamic code execution. L3: // [redacted].ts L4: import { spawn } from "child_process"; L5: import { join } from "path"; ... L10: var kk_default = async (input) => { L11: if (process.env["KENKEEP_BUILDER_INTERNAL"] === "1") return {}; L12: const projectDir = input.directory ?? input.project?.worktree ?? process.cwd(); L13: const kkHooks = join(projectDir, ".ai", "kenkeep", "hooks", "opencode"); ... L29: if (child.stdin) { L30: child.stdin.write(payload); L31: child.stdin.end();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/plugins/opencode/kk.mjsView on unpkg · L3

dist/cli.jsView file

525// src/harnesses/claude/headless.ts L526: import { execa } from "execa"; L527: import { createWriteStream, mkdirSync as mkdirSync5 } from "fs";

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L525

5717} L5718: process.stdout.write( L5719: `${JSON.stringify({ path: filePath, session_id: sessionId, idempotency })} ... L5726: import { readFileSync as readFileSync35 } from "fs"; L5727: import { resolve as resolve6 } from "path"; L5728: import matter12 from "gray-matter"; ... L5731: import matter11 from "gray-matter"; L5732: import { execFileSync as execFileSync2 } from "child_process"; L5733: import { existsSync as existsSync42, readFileSync as readFileSync34, readdirSync as readdirSync12, statSync as statSync7 } from "fs";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L5717

dist/hooks/copilot/kk-session-start.cjsView file

301function createSection() { L302: return { key: "", data: "", content: "" }; L303: } ... L782: if (ch === "_") continue; L783: if (!isHexCode(data.charCodeAt(index))) return false; L784: hasDigits = true; ... L1414: if (ast.body[0].expression.body.type === "BlockStatement") { L1415: return new Function(params, source.slice(body[0] + 1, body[1] - 1)); L1416: } ... L3583: var LAUNCHER_STDIN_DEADLINE_MS = 250; L3584: function isLauncherChild(env = process.env) { L3585: return env[LAUNCHER_CHILD_ENV] === "1";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/hooks/copilot/kk-session-start.cjsView on unpkg · L301

1414if (ast.body[0].expression.body.type === "BlockStatement") { L1415: return new Function(params, source.slice(body[0] + 1, body[1] - 1)); L1416: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/hooks/copilot/kk-session-start.cjsView on unpkg · L1414

Findings

5 High3 Medium6 Low

HighChild Processdist/plugins/opencode/kk.mjs

HighShelldist/cli.js

HighCommand Output Exfiltrationdist/cli.js

HighObfuscated Payload Loaderdist/hooks/copilot/kk-session-start.cjs

HighCross File Remote Execution Contextdist/plugins/opencode/kk.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/hooks/copilot/kk-session-start.cjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/plugins/opencode/kk.mjsView file

Lines 1-23javascript

1// kenkeep plugin

3// src/harnesses/opencode/plugins/kk.ts

4import { spawn } from "child_process";

5import { join } from "path";

High

Child Process

Package source references child process execution.

dist/plugins/opencode/kk.mjsView on unpkg · L3

6var DISPATCH = {

7 "session.created": ["kk-session-start.cjs", "kk-proposal-drain.cjs"],

8 "session.idle": ["kk-capture.cjs", "kk-lint-tick.cjs"]

9};

10var kk_default = async (input) => {

11 if (process.env["KENKEEP_BUILDER_INTERNAL"] === "1") return {};

12 const projectDir = input.directory ?? input.project?.worktree ?? process.cwd();

13 const kkHooks = join(projectDir, ".ai", "kenkeep", "hooks", "opencode");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/plugins/opencode/kk.mjsView on unpkg · L3

14 return {

15 event: async ({ event }) => {

16 if (!event.type) return;

17 const scripts = DISPATCH[event.type];

18 if (!scripts) return;

19 const payload = JSON.stringify({

20 session_id: event.properties?.sessionID,

21 hook_event_name: event.type === "session.created" ? "SessionCreated" : "SessionIdle",

22 cwd: projectDir

23 });

dist/cli.jsView file

Lines 505-545javascript

505 if (missingRegs.length === 0 && missingFiles.size === 0) {

506 return ok("all expected hook entries and scripts present");

507 }

508 const parts = [];

509 if (missingRegs.

dist/hooks/copilot/kk-session-start.cjsView file

Lines 281-321javascript

281 }

282 if (line.charAt(delim.length + 1) === delim.slice(-1)) {

283 return false;

284 }

285 return true;

Lines 5697-5737javascript

5697 const filePath = join46(sessionsDir, filename);

5698 const body = renderSessionLog({

5699 sessionId,

5700 capturedBy: "manual",

5701 capturedAt,

5702 transcriptHash,

5703 body: transcriptBody,

5704 proposalStatus: "done",

5705 proposalCompletedAt: capturedAt,

5706 proposalError: null,

5707 proposals: {

5708 practice: validated.data.practice,

5709 map: validated.data.map

5710 }

5711 });

5712 try {

5713 atomicWriteFile(filePath, body);

5714 } catch (err2) {

5715 log.error(err2 instanceof Error ? err2.message : String(err2));

5716 return 1;

5717 }

5718 process.stdout.write(

5719 `${JSON.stringify({ path: filePath, session_id: sessionId, idempotency })}

5720`

5721 );

5722 return 0;

5723}

5724

5725// src/commands/session-log-update-proposals.ts

5726import { readFileSync as readFileSync35 } from "fs";

5727import { resolve as resolve6 } from "path";

5728import matter12 from "gray-matter";

5729

5730// src/lib/proposal-drain.ts

5731import matter11 from "gray-matter";

5732import { execFileSync as execFileSync2 } from "child_process";

5733import { existsSync as existsSync42, readFileSync as readFileSync34, readdirSync as readdirSync12, statSync as statSync7 } from "fs";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L5717

5734import { join as join47 } from "path";

5735import lockfile2 from "proper-lockfile";

5736function writeSessionLogFrontmatter(file, parsed, patch) {

5737 const data = { ...parsed.data };

Lines 1394-1434javascript

1394 if (data === null) return false;

1395 try {

1396 var source = "(" + data + ")", ast = esprima.parse(source, { range: true });

1397 if (ast.type !== "Program" || ast.body.length !== 1 || ast.body[0].type !== "ExpressionStatement" || ast.body[0].expression.type !== "ArrowFunctionExpression" && ast.body[0].expression.type !== "FunctionExpression") {

1398 return false;

1399 }

1400 return true;

1401 } catch (err) {

1402 return false;

1403 }

1404 }

1405 function constructJavascriptFunction(data) {

1406 var source = "(" + data + ")", ast = esprima.parse(source, { range: true }), params = [], body;

1407 if (ast.type !== "Program" || ast.body.length !== 1 || ast.body[0].type !== "ExpressionStatement" || ast.body[0].expression.type !== "ArrowFunctionExpression" && ast.body[0].expression.type !== "FunctionExpression") {

1408 throw new Error("Failed to resolve function");

1409 }

1410 ast.body[0].expression.params.forEach(function(param) {

1411 params.push(param.name);

1412 });

1413 body = ast.body[0].expression.body.range;

1414 if (ast.body[0].expression.body.type === "BlockStatement") {

1415 return new Function(params, source.slice(body[0] + 1, body[1] - 1));

1416 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/hooks/copilot/kk-session-start.cjsView on unpkg · L1414

1417 return new Function(params, "return " + source.slice(body[0], body[1]));

1418 }

1419 function representJavascriptFunction(object) {

1420 return object.toString();

1421 }

1422 function isFunction(object) {

1423 return Object.prototype.toString.call(object) === "[object Function]";

1424 }

1425 module2.exports = new Type2("tag:yaml.org,2002:js/function", {

1426 kind: "scalar",

1427 resolve: resolveJavascriptFunction,

1428 construct: constructJavascriptFunction,

1429 predicate: isFunction,

1430 represent: representJavascriptFunction

1431 });

1432 }

1433});

1434