registry / mancode / 0.3.9

mancode@0.3.9

AI coding agent workflow harness. Five modes from practice to playoffs: stop over-engineering, reuse project context, and add multi-agent code review.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemShell

Supply chain

HighEntropyStrings

Manifest

CopyleftLicense

scanned 3 file(s), 386 KB of source

Source & flagged code

1 flagged

dist/cli.jsView file

Lines 10-50javascript

10import { promises as fs4 } from "fs";

11import os from "os";

12import path15 from "path";

13import process5 from "process";

15// src/installers/claude-code.ts

16import {

17 access,

18 mkdir as mkdir3,

19 readFile as readFile3,

20 readdir,

21 rm,

22 writeFile as writeFile3

23} from "fs/promises";

24import path3 from "path";

26// src/templates/agents/scout.ts

27var SCOUT_AGENT = {

28 name: "scout",

29 description: "Investigates the codebase for mancode /man workflows. Finds similar implementations, reusable modules, files to change, and risks. Does not write code.",

30 tools: ["Read", "Grep", "Glob", "Bash"],

31 body: `\u4F60\u662F mancode \u6559\u7EC3\u7EC4\u7684 Scout\uFF08\u7403\u63A2\uFF09\u3002

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L30

33\u4F60\u7684\u804C\u8D23\uFF1A\u8C03\u7814\u4EE3\u7801\u5E93\uFF0C\u4E3A Head Coach \u51C6\u5907\u6218\u672F\u4FE1\u606F\u3002

35## \u5DE5\u4F5C\u98CE\u683C

37- \u7CBE\u51C6\uFF0C\u4E0D\u5570\u55E6

38- \u53EA\u5217\u5BF9\u5B9E\u65BD\u6709\u7528\u7684\u4FE1\u606F

39- \u627E\u5230\u98CE\u9669\u70B9\u8981\u6807\u6CE8\uFF08\u26A0\uFE0F\uFF09

40- \u4E0D\u786E\u5B9A\u7684\u8981\u660E\u8BF4\uFF0C\u4E0D\u731C

41- \u5F15\u7528\u6587\u4EF6\u7528 \`path:line\` \u683C\u5F0F\uFF0C\u8BA9 Head Coach \u4E00\u79D2\u8DF3\u8FC7\u53BB

43## \u4F60\u4E0D\u662F\u51B3\u7B56\u8005

45\u4F60\u7684\u62A5\u544A\u4EA4\u7ED9 Head Coach\uFF0C\u8BA9\u4ED6\u5B9A\u6218\u672F\u3002**\u4E0D\u5199\u4EE3\u7801\u3001\u4E0D\u4FEE\u6539\u6587\u4EF6**\u3002

47## \u8C03\u7814\u6E05\u5355

491. **\u4EE3\u7801\u5E93\u626B\u63CF**

50 - \u641C\u7D22\u76F8\u4F3C\u5B9E\u73B0\uFF08"\u9879\u76EE\u91CC\u6709\u6CA1\u6709 X\uFF1F"\uFF09

Source & flagged code

1 flagged · loading source

dist/cli.jsView file

30tools: ["Read", "Grep", "Glob", "Bash"], L31: body: `\u4F60\u662F mancode \u6559\u7EC3\u7EC4\u7684 Scout\uFF08\u7403\u63A2\uFF09\u3002 L32: ... L618: try { L619: return JSON.parse(readFileSync(filePath, 'utf8')); L620: } catch { ... L1026: L1027: \u5982\u679C \`config.cliCommand\` \u4E0D\u5B58\u5728\uFF0C\u518D\u89E3\u6790\u53EF\u7528 CLI\u3002\u5FC5\u987B\u4F7F\u7528\u4E0B\u9762\u8FD9\u4E2A Node \u5305\u88C5\u5668\u6267\u8... L1028: ... L2262: "Step 5 \u2014 Implement the confirmed minimum change.", L2263: "Step 6 \u2014 Run `workflow verify <taskId> init`, execute detected build/lint/typecheck/test and smoke checks, and record every required acceptance ID with reproducible evidence;... L2264: "Step 7 \u2014 Run one quality review limited to the changed diff and direct impact. Fin

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code