registry / loki-mode / 7.104.1

loki-mode@7.104.1

Loki Mode by Autonomi. Autonomous spec-to-product system: takes a PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief to a deployed app via the RARV-C closure loop with 8 quality gates. Provider-agnostic (Claude Code, OpenAI Codex, Cline, Aider).

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 20 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 160 file(s), 2.45 MB of source, external domains: 127.0.0.1, adaptivecards.io, api.github.com, api.honeycomb.io, api.linear.app, api.npmjs.org, app.netlify.com, cdn.jsdelivr.net, cli.github.com, deno.land, discord.gg, github.com, hooks.slack.com, my-app.vercel.app, react.dev, registry.npmjs.org, twitter.com, vercel.com, www.autonomi.dev, www.w3.org

Oversized source lightweight scan

dashboard/static/assets/mermaid.min.js3.18 MB file, sampled 256 KB

NetworkChildProcessHighEntropyStringsMinifiedUrlStringswww.w3.org

Source & flagged code

11 flagged

references/invariant-checks.mdView file

Lines 36-76markdown

36### Deferred (honestly NOT implemented)

38These two requested categories are deferred because a static grep cannot do them

39deterministically without becoming flaky. They are documented here, not faked:

41- **No unhandled-error path on the happy route.** A grep cannot do control-flow

42 analysis; a "no try/catch near await" heuristic is noise. This belongs to a

43 real analysis pass (LSP diagnostics / typed exhaustiveness checking), tracked

44 separately as the LSP-in-verification work.

45- **Idempotency / round-trip invariants.** Not statically detectable in any

46 deterministic way worth shipping. It requires executing generated tests (the

47 larger fast-check / metamorphic-testing feature). Deferred, not faked.

49## False-positive avoidance

51Generated code legitimately contains placeholders. The detector skips them:

53- Placeholder allowlist on the matched line: `EXAMPLE`, `example.com`, `your-`,

54 `xxxx`, `placeholder`, `changeme`, `REPLACE`, `<...>`, `dummy`, `sample`,

55 `redact`, `sk-test-`, `fake`, `FIXME`, `TODO`, `****`. This covers AWS's own

56 documented `AKIAIOSFODNN7EXAMPLE` and `your-api-key-here`.

Critical

Critical Secret

Package contains a critical-looking secret pattern.

references/invariant-checks.mdView on unpkg · L56

Critical

Secret Pattern

AWS access key ID in references/invariant-checks.md

references/invariant-checks.mdView on unpkg · L56

57- Illustration files skipped for secret checks: `*.md`, `*.example`, `*.sample`,

58 `*.template`, `*.dist` (they routinely show fake credentials on purpose).

59- Env-var indirection (`process.env`, `os.environ`, `getenv`, `ENV[`) is not a

60 hardcoded literal and is skipped for the generic check.

62## Scan surface

64Source files only. Extensions: ts, tsx, js, jsx, py, go, rb, java, rs, php, sh,

65env, yml, yaml, json, plus `*.log`. Excludes `node_modules`, `.git`, `dist`,

66`build`, `vendor`, `coverage`, and Loki's own `.loki/` telemetry.

68Test files are OUT OF SCOPE for all checks (consistent with the "source/logs"

69framing of this invariant). The exclusion covers every common ecosystem's test

70convention, not just the JS glob: `*.test.*` / `*.spec.*`, `test_*.py` /

71`*_test.py`, `test-*.sh`, `*_test.go`, and anything under an anchored

72`tests/` / `__tests__/` / `spec/` directory. Security/redaction test fixtures

73routinely embed realistic fake credentials on purpose, so scanning them would be

74pure noise. Comprehensive secret scanning of generated TESTS (and pre-write

75scanning) is a separate, larger feature tracked as P3-4 (#634), not this gate.

loki-ts/dist/loki.jsView file

Lines 311-354javascript

311 try:

312 phase1['escalations_count'] = sum(

313 1 for n in os.listdir(escalations_dir) if n.endswith('.md')

314 )

315 except Exception:

316 pass

317phase1[

bin/loki-mode.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * Loki Mode npm wrapper.

4 *

5 * Delegates to bin/loki (the runtime-aware shim).

6 *

7 * v7.4.12: Removed from package.json `bin` map. Existing installs that have

8 * `loki-mode` symlinked still work (file is on disk + delegates to `loki`),

9 * but new installs only get the `loki` binary. Prints a one-time deprecation

10 * banner to stderr so muscle-memory users notice and switch.

11 */

web-app/auth.pyView file

•path = web-app/auth.py kind = build_helper sizeBytes = 9098 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-app/auth.pyView on unpkg

memory/tests/test_namespace.pyView file

•path = memory/tests/test_namespace.py kind = payload_in_excluded_dir sizeBytes = 18946 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

memory/tests/test_namespace.pyView on unpkg

dashboard/static/assets/mermaid.min.jsView file

•path = dashboard/static/assets/mermaid.min.js kind = oversized_source_file sizeBytes = 3336946 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dashboard/static/assets/mermaid.min.jsView on unpkg

docs/siem-integration.mdView file

Lines 242-282markdown

242```yaml

243# /etc/filebeat/inputs.d/loki-audit.yml

244filebeat.inputs:

245 - type: log

246 enabled: true

247 paths:

248 - /home/user/.loki/dashboard/audit/*.jsonl

249 json.keys_under_root: true

250

autonomy/lib/secure-scan.pyView file

Lines 118-158python

118 ("google-api-key", re.compile(r"\bAIza[0-9A-Za-z_-]{35}\b")),

119 # Slack bot token: xoxb- + token body

120 ("slack-bot-token", re.compile(r"\bxoxb-[0-9A-Za-z-]{10,}\b")),

121]

122

123# Placeholder / example markers. If the matched secret (or its surrounding

124# token) is an obvious placeholder, do NOT flag it. This is the core

125# false-positive guard for rule 2: docs, .env.example files and templates are

126# full of fake keys and flagging them is exactly the cry-wolf failure mode.

127_PLACEHOLDER_TOKENS = (

128 "xxxx", "your-key", "your_key", "yourkey", "example", "examplekey",

129

Source & flagged code

11 flagged · loading source

references/invariant-checks.mdView file

56patternName = aws_access_key severity = critical line = 56 matchedText = document...re`.

Critical

Critical Secret

Package contains a critical-looking secret pattern.

references/invariant-checks.mdView on unpkg · L56

56patternName = aws_access_key severity = critical line = 56 matchedText = document...re`.

Critical

Secret Pattern

AWS access key ID in references/invariant-checks.md

references/invariant-checks.mdView on unpkg · L56

loki-ts/dist/loki.jsView file

334`)}function B0($){let Q=!1,Z=!1;for(let K of $)if(K==="--json")Q=!0;else if(K==="--efficiency")Z=!0;let z=P();if(!V1(z)){if(Q)return{exitCode:0,stdout:'{"error": "No active session... L335: Start a session with: loki start <prd>`}}let X=Y3(z);return{exitCode:0,stdout:Q?M3(X,Z):T3(X,Z)}}async function O3($){let{emitDeprecatedAlias:Q}=await Promise.resolve().then(() => ... L336: `);if(G>0&&N.length>0)N=N.slice(1);N=N.map((g)=>g.trim()).filter((g)=>g.length>0),U=N.slice(-5)}}catch{U=[]}return{errors_log_path:H?V:null,recent_errors:U,recent_error_count:U.len...

High

Child Process

Package source references child process execution.

loki-ts/dist/loki.jsView on unpkg · L334

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

loki-ts/dist/loki.jsView on unpkg · L334

331print(json.dumps(result, indent=2)) L332: `;var V0=L(()=>{d();V$();c();C()});var U0={};b(U0,{emitDeprecatedAlias:()=>X1,deprecatedAliasShouldSuppress:()=>W0});function W0($){let Q=$[0];if(Q!==void 0&&H3.has(Q))return!0;for... L333: `)}var U3,H3;var K1=L(()=>{U3=new Set(["--json","-q","--quiet"]),H3=new Set(["json","csv","timeline"])});var Y0={};b(Y0,{runStats:()=>O3,computeStats:()=>B0});import{readdirSync as... L334: `)}function B0($){let Q=!1,Z=!1;for(let K of $)if(K==="--json")Q=!0;else if(K==="--efficiency")Z=!0;let z=P();if(!V1(z)){if(Q)return{exitCode:0,stdout:'{"error": "No active session... L335: Start a session with: loki start <prd>`}}let X=Y3(z);return{exitCode:0,stdout:Q?M3(X,Z):T3(X,Z)}}async function O3($){let{emitDeprecatedAlias:Q}=await Promise.resolve().then(() => ... L336: `);if(G>0&&N.length>0)N=N.slice(1);N=N.map((g)=>g.trim()).filter((g)=>g.length>0),U=N.slice(-5)}}catch{U=[]}return{errors_log_path:H?V:null,recent_errors:U,recent_error_count:U.len...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

loki-ts/dist/loki.jsView on unpkg · L331

bin/loki-mode.jsView file

12L13: const { spawn } = require('child_process'); L14: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/loki-mode.jsView on unpkg · L12

web-app/auth.pyView file

•path = web-app/auth.py kind = build_helper sizeBytes = 9098 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

web-app/auth.pyView on unpkg

memory/tests/test_namespace.pyView file

•path = memory/tests/test_namespace.py kind = payload_in_excluded_dir sizeBytes = 18946 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

memory/tests/test_namespace.pyView on unpkg

dashboard/static/assets/mermaid.min.jsView file

•path = dashboard/static/assets/mermaid.min.js kind = oversized_source_file sizeBytes = 3336946 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dashboard/static/assets/mermaid.min.jsView on unpkg

docs/siem-integration.mdView file

262patternName = generic_password severity = medium line = 262 matchedText = password...RD}"

Medium

Secret Pattern

Hardcoded password in docs/siem-integration.md

docs/siem-integration.mdView on unpkg · L262

autonomy/lib/secure-scan.pyView file

138patternName = aws_access_key severity = critical line = 138 matchedText = all-same...."""

Critical

Secret Pattern

AWS access key ID in autonomy/lib/secure-scan.py

autonomy/lib/secure-scan.pyView on unpkg · L138

Findings

3 Critical5 High6 Medium6 Low

CriticalCritical Secretreferences/invariant-checks.md

CriticalSecret Patternreferences/invariant-checks.md

CriticalSecret Patternautonomy/lib/secure-scan.py

HighChild Processloki-ts/dist/loki.js

HighSame File Env Network Executionloki-ts/dist/loki.js

HighCommand Output Exfiltrationloki-ts/dist/loki.js

HighPayload In Excluded Dirmemory/tests/test_namespace.py

HighOversized Source Filedashboard/static/assets/mermaid.min.js

MediumDynamic Requirebin/loki-mode.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperweb-app/auth.py

MediumStructural Risk Force Deep Review

MediumSecret Patterndocs/siem-integration.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings