registry / mancode / 0.3.1

mancode@0.3.1

AI coding agent workflow harness. Five modes from practice to playoffs: stop over-engineering, reuse project context, and add multi-agent code review.

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemShell

Supply chain

HighEntropyStrings

Manifest

CopyleftLicense

scanned 3 file(s), 273 KB of source

Source & flagged code

1 flagged

dist/cli.jsView file

Lines 9-49javascript

9// src/commands/init.ts

10import { promises as fs2 } from "fs";

11import path13 from "path";

12import process3 from "process";

14// src/installers/claude-code.ts

15import {

16 access,

17 mkdir as mkdir3,

18 readFile as readFile3,

19 readdir,

20 rm,

21 writeFile as writeFile3

22} from "fs/promises";

23import path3 from "path";

25// src/templates/agents/scout.ts

26var SCOUT_AGENT = {

27 name: "scout",

28 description: "Investigates the codebase for mancode /man workflows. Finds similar implementations, reusable modules, files to change, and risks. Does not write code.",

29 tools: ["Read", "Grep", "Glob", "Bash"],

30 body: `\u4F60\u662F mancode \u6559\u7EC3\u7EC4\u7684 Scout\uFF08\u7403\u63A2\uFF09\u3002

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L29

32\u4F60\u7684\u804C\u8D23\uFF1A\u8C03\u7814\u4EE3\u7801\u5E93\uFF0C\u4E3A Head Coach \u51C6\u5907\u6218\u672F\u4FE1\u606F\u3002

34## \u5DE5\u4F5C\u98CE\u683C

36- \u7CBE\u51C6\uFF0C\u4E0D\u5570\u55E6

37- \u53EA\u5217\u5BF9\u5B9E\u65BD\u6709\u7528\u7684\u4FE1\u606F

38- \u627E\u5230\u98CE\u9669\u70B9\u8981\u6807\u6CE8\uFF08\u26A0\uFE0F\uFF09

39- \u4E0D\u786E\u5B9A\u7684\u8981\u660E\u8BF4\uFF0C\u4E0D\u731C

40- \u5F15\u7528\u6587\u4EF6\u7528 \`path:line\` \u683C\u5F0F\uFF0C\u8BA9 Head Coach \u4E00\u79D2\u8DF3\u8FC7\u53BB

42## \u4F60\u4E0D\u662F\u51B3\u7B56\u8005

44\u4F60\u7684\u62A5\u544A\u4EA4\u7ED9 Head Coach\uFF0C\u8BA9\u4ED6\u5B9A\u6218\u672F\u3002**\u4E0D\u5199\u4EE3\u7801\u3001\u4E0D\u4FEE\u6539\u6587\u4EF6**\u3002

46## \u8C03\u7814\u6E05\u5355

481. **\u4EE3\u7801\u5E93\u626B\u63CF**

49 - \u641C\u7D22\u76F8\u4F3C\u5B9E\u73B0\uFF08"\u9879\u76EE\u91CC\u6709\u6CA1\u6709 X\uFF1F"\uFF09

Source & flagged code

1 flagged · loading source

dist/cli.jsView file

29tools: ["Read", "Grep", "Glob", "Bash"], L30: body: `\u4F60\u662F mancode \u6559\u7EC3\u7EC4\u7684 Scout\uFF08\u7403\u63A2\uFF09\u3002 L31: ... L506: // src/templates/inline.ts L507: var SESSION_START_HOOK = `#!/bin/bash L508: # .mancode/hooks/session-start.sh ... L926: L927: \u5982\u679C \`config.cliCommand\` \u4E0D\u5B58\u5728\uFF0C\u518D\u89E3\u6790\u53EF\u7528 CLI\u3002\u5FC5\u987B\u4F7F\u7528\u4E0B\u9762\u8FD9\u4E2A Node \u5305\u88C5\u5668\u6267\u8... L928: ... L949: try { L950: config = JSON.parse(fs.readFileSync(".mancode/config.json", "utf8")); L951: } catch {}

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code