Static Scan Results
scanned 3h ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
2 flagged · loading sourcedist/lib/codex-rollout-traces.jsView file
6exports.clearCodexTraceBundles = exports.getCodexTraceEventDetail = exports.getCodexTraceEventsForSession = exports.getCodexTraceEvents = exports.stopCodexTraceMaintenance = export...
L7: const child_process_1 = require("child_process");
L8: const fs_1 = __importDefault(require("fs"));
...
L19: let lastSyncAt = 0;
L20: const getCodexTraceRoot = () => path_1.default.resolve(process.env.CLAUDE_PROXY_CODEX_TRACE_ROOT ||
L21: path_1.default.join(process.env.HOME || "~", ".claude-proxy", "codex-rollout-traces"));
...
L26: const raw = fs_1.default.readFileSync(path_1.default.join(bundlePath, "manifest.json"), "utf-8");
L27: const value = JSON.parse(raw);
L28: if (typeof value.trace_id !== "string" ||
...
L109: exports.pruneCodexTraceBundles = pruneCodexTraceBundles;
L110: const launchctlEnabled = () => process.platform === "darwin" &&
L111: process.env.CLAUDE_PROXY_CODEX_TRACE_SKIP_LAUNCHCTL !== "1" &&
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/lib/codex-rollout-traces.jsView on unpkg · L6app/macos-status-bar/bin/StatusBarAppView file
•path = app/macos-status-bar/bin/StatusBarApp
kind = native_binary
sizeBytes = 163136
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
app/macos-status-bar/bin/StatusBarAppView on unpkgFindings
5 Medium4 Low
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/codex-rollout-traces.js
MediumShips Native Binaryapp/macos-status-bar/bin/StatusBarApp
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings