registry / kenkeep / 1.13.0

kenkeep@1.13.0

⚠ Under review

Builds and maintains a per-repo knowledge base from AI coding sessions, for Claude Code, OpenAI Codex CLI, Cursor, OpenCode, and GitHub Copilot CLI.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 49 file(s), 18.5 MB of source, external domains: api.github.com, github.com, opencode.ai

Source & flagged code

7 flagged

dist/plugins/opencode/kk.mjsView file

Lines 1-23javascript

1// kenkeep plugin

3// src/harnesses/opencode/plugins/kk.ts

4import { spawn } from "child_process";

5import { join } from "path";

High

Child Process

Package source references child process execution.

dist/plugins/opencode/kk.mjsView on unpkg · L3

6var DISPATCH = {

7 "session.created": ["kk-session-start.cjs", "kk-proposal-drain.cjs"],

8 "session.idle": ["kk-capture.cjs", "kk-lint-tick.cjs"]

9};

10var kk_default = async (input) => {

11 if (process.env["KENKEEP_BUILDER_INTERNAL"] === "1") return {};

12 const projectDir = input.directory ?? input.project?.worktree ?? process.cwd();

13 const kkHooks = join(projectDir, ".ai", "kenkeep", "hooks", "opencode");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/plugins/opencode/kk.mjsView on unpkg · L3

14 return {

15 event: async ({ event }) => {

16 if (!event.type) return;

17 const scripts = DISPATCH[event.type];

18 if (!scripts) return;

19 const payload = JSON.stringify({

20 session_id: event.properties?.sessionID,

21 hook_event_name: event.type === "session.created" ? "SessionCreated" : "SessionIdle",

22 cwd: projectDir

23 });

dist/cli.jsView file

Lines 505-545javascript

505 if (missingRegs.length === 0 && missingFiles.size === 0) {

506 return ok("all expected hook entries and scripts present");

507 }

508 const parts = [];

509 if (missingRegs.

dist/hooks/copilot/kk-session-start.cjsView file

Lines 281-321javascript

281 }

282 if (line.charAt(delim.length + 1) === delim.slice(-1)) {

283 return false;

284 }

285 return true;

Source & flagged code

7 flagged · loading source

dist/plugins/opencode/kk.mjsView file

3// [redacted].ts L4: import { spawn } from "child_process"; L5: import { join } from "path";

High

Child Process

Package source references child process execution.

dist/plugins/opencode/kk.mjsView on unpkg · L3

3Cross-file remote execution chain: dist/plugins/opencode/kk.mjs spawns dist/hooks/copilot/kk-session-start.cjs; helper contains network access plus dynamic code execution. L3: // [redacted].ts L4: import { spawn } from "child_process"; L5: import { join } from "path"; ... L10: var kk_default = async (input) => { L11: if (process.env["KENKEEP_BUILDER_INTERNAL"] === "1") return {}; L12: const projectDir = input.directory ?? input.project?.worktree ?? process.cwd(); L13: const kkHooks = join(projectDir, ".ai", "kenkeep", "hooks", "opencode"); ... L29: if (child.stdin) { L30: child.stdin.write(payload); L31: child.stdin.end();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/plugins/opencode/kk.mjsView on unpkg · L3

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = kenkeep@1.11.3 matchedIdentity = npm:a2Vua2VlcA:1.11.3 similarity = 0.980 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

525// src/harnesses/claude/headless.ts L526: import { execa } from "execa"; L527: import { createWriteStream, mkdirSync as mkdirSync5 } from "fs";

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L525

5934} L5935: process.stdout.write( L5936: `${JSON.stringify({ path: filePath, session_id: sessionId, idempotency })} ... L5943: import { readFileSync as readFileSync37 } from "fs"; L5944: import { resolve as resolve6 } from "path"; L5945: import matter14 from "gray-matter"; ... L5948: import matter13 from "gray-matter"; L5949: import { execFileSync as execFileSync2 } from "child_process"; L5950: import { existsSync as existsSync43, readFileSync as readFileSync36, readdirSync as readdirSync12, statSync as statSync7 } from "fs";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L5934

dist/hooks/copilot/kk-session-start.cjsView file

301function createSection() { L302: return { key: "", data: "", content: "" }; L303: } ... L782: if (ch === "_") continue; L783: if (!isHexCode(data.charCodeAt(index))) return false; L784: hasDigits = true; ... L1414: if (ast.body[0].expression.body.type === "BlockStatement") { L1415: return new Function(params, source.slice(body[0] + 1, body[1] - 1)); L1416: } ... L3583: var LAUNCHER_STDIN_DEADLINE_MS = 250; L3584: function isLauncherChild(env = process.env) { L3585: return env[LAUNCHER_CHILD_ENV] === "1";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/hooks/copilot/kk-session-start.cjsView on unpkg · L301

1414if (ast.body[0].expression.body.type === "BlockStatement") { L1415: return new Function(params, source.slice(body[0] + 1, body[1] - 1)); L1416: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/hooks/copilot/kk-session-start.cjsView on unpkg · L1414

Findings

1 Critical5 High3 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/cli.js

HighChild Processdist/plugins/opencode/kk.mjs

HighShelldist/cli.js

HighCommand Output Exfiltrationdist/cli.js

HighObfuscated Payload Loaderdist/hooks/copilot/kk-session-start.cjs

HighCross File Remote Execution Contextdist/plugins/opencode/kk.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/hooks/copilot/kk-session-start.cjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/plugins/opencode/kk.mjsView file

Lines 1-23javascript

1// kenkeep plugin

3// src/harnesses/opencode/plugins/kk.ts

4import { spawn } from "child_process";

5import { join } from "path";

High

Child Process

Package source references child process execution.

dist/plugins/opencode/kk.mjsView on unpkg · L3

6var DISPATCH = {

7 "session.created": ["kk-session-start.cjs", "kk-proposal-drain.cjs"],

8 "session.idle": ["kk-capture.cjs", "kk-lint-tick.cjs"]

9};

10var kk_default = async (input) => {

11 if (process.env["KENKEEP_BUILDER_INTERNAL"] === "1") return {};

12 const projectDir = input.directory ?? input.project?.worktree ?? process.cwd();

13 const kkHooks = join(projectDir, ".ai", "kenkeep", "hooks", "opencode");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/plugins/opencode/kk.mjsView on unpkg · L3

14 return {

15 event: async ({ event }) => {

16 if (!event.type) return;

17 const scripts = DISPATCH[event.type];

18 if (!scripts) return;

19 const payload = JSON.stringify({

20 session_id: event.properties?.sessionID,

21 hook_event_name: event.type === "session.created" ? "SessionCreated" : "SessionIdle",

22 cwd: projectDir

23 });

dist/cli.jsView file

Lines 505-545javascript

505 if (missingRegs.length === 0 && missingFiles.size === 0) {

506 return ok("all expected hook entries and scripts present");

507 }

508 const parts = [];

509 if (missingRegs.

dist/hooks/copilot/kk-session-start.cjsView file

Lines 281-321javascript

281 }

282 if (line.charAt(delim.length + 1) === delim.slice(-1)) {

283 return false;

284 }

285 return true;

Lines 5914-5954javascript

5914 const filePath = join46(sessionsDir, filename);

5915 const body = renderSessionLog({

5916 sessionId,

5917 capturedBy: "manual",

5918 capturedAt,

5919 transcriptHash,

5920 body: transcriptBody,

5921 proposalStatus: "done",

5922 proposalCompletedAt: capturedAt,

5923 proposalError: null,

5924 proposals: {

5925 practice: validated.data.practice,

5926 map: validated.data.map

5927 }

5928 });

5929 try {

5930 atomicWriteFile(filePath, body);

5931 } catch (err2) {

5932 log.error(err2 instanceof Error ? err2.message : String(err2));

5933 return 1;

5934 }

5935 process.stdout.write(

5936 `${JSON.stringify({ path: filePath, session_id: sessionId, idempotency })}

5937`

5938 );

5939 return 0;

5940}

5941

5942// src/commands/session-log-update-proposals.ts

5943import { readFileSync as readFileSync37 } from "fs";

5944import { resolve as resolve6 } from "path";

5945import matter14 from "gray-matter";

5946

5947// src/lib/proposal-drain.ts

5948import matter13 from "gray-matter";

5949import { execFileSync as execFileSync2 } from "child_process";

5950import { existsSync as existsSync43, readFileSync as readFileSync36, readdirSync as readdirSync12, statSync as statSync7 } from "fs";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L5934

5951import { join as join47 } from "path";

5952import lockfile2 from "proper-lockfile";

5953function writeSessionLogFrontmatter(file, parsed, patch) {

5954 const data = { ...parsed.data };

Lines 1394-1434javascript

1394 if (data === null) return false;

1395 try {

1396 var source = "(" + data + ")", ast = esprima.parse(source, { range: true });

1397 if (ast.type !== "Program" || ast.body.length !== 1 || ast.body[0].type !== "ExpressionStatement" || ast.body[0].expression.type !== "ArrowFunctionExpression" && ast.body[0].expression.type !== "FunctionExpression") {

1398 return false;

1399 }

1400 return true;

1401 } catch (err) {

1402 return false;

1403 }

1404 }

1405 function constructJavascriptFunction(data) {

1406 var source = "(" + data + ")", ast = esprima.parse(source, { range: true }), params = [], body;

1407 if (ast.type !== "Program" || ast.body.length !== 1 || ast.body[0].type !== "ExpressionStatement" || ast.body[0].expression.type !== "ArrowFunctionExpression" && ast.body[0].expression.type !== "FunctionExpression") {

1408 throw new Error("Failed to resolve function");

1409 }

1410 ast.body[0].expression.params.forEach(function(param) {

1411 params.push(param.name);

1412 });

1413 body = ast.body[0].expression.body.range;

1414 if (ast.body[0].expression.body.type === "BlockStatement") {

1415 return new Function(params, source.slice(body[0] + 1, body[1] - 1));

1416 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/hooks/copilot/kk-session-start.cjsView on unpkg · L1414

1417 return new Function(params, "return " + source.slice(body[0], body[1]));

1418 }

1419 function representJavascriptFunction(object) {

1420 return object.toString();

1421 }

1422 function isFunction(object) {

1423 return Object.prototype.toString.call(object) === "[object Function]";

1424 }

1425 module2.exports = new Type2("tag:yaml.org,2002:js/function", {

1426 kind: "scalar",

1427 resolve: resolveJavascriptFunction,

1428 construct: constructJavascriptFunction,

1429 predicate: isFunction,

1430 represent: representJavascriptFunction

1431 });

1432 }

1433});

1434