registry / memoryrouter-codex / 1.7.0
memoryrouter-codex@1.7.0
Automatic MemoryRouter memory for OpenAI Codex: one vault shared by every session, repo and tool, including Claude Code
AI Security Review
scanned 18d ago · by lpm-firewall-aiSource inspection found no confirmed attack behavior. The configuration changes are part of explicit CLI setup, and the process-execution finding is used for local git metadata.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the init command.
Impact
The inspected source does not establish unconsented configuration mutation or another concrete attack.
Mechanism
The installer copies runtime files and adds the integration’s Codex configuration and hooks.
AI rationale
Source inspection found no confirmed attack behavior. The configuration changes are part of explicit CLI setup, and the process-execution finding is used for local git metadata.
Evidence
package.jsonbin/cli.cjslib/installer.cjsruntime/config.cjsruntime/project.cjs
Decision evidence
public snapshotAI called this Clean at 85.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI entry point; its scripts are development and packaging commands.
- The installer writes Codex configuration and registers hooks when init is called.
- The CLI routes the init command to the installer.
- The configured user data directory is under the user’s home directory.
- Project identity code uses git commands to derive local project metadata.
Evidence against
- No confirmed attack behavior was identified; the configuration setup is tied to an explicit CLI command.
- The scanner’s process-execution hint corresponds to git-based project identification.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedruntime/project.cjsView file
29const crypto = require('crypto');
L30: const { execFileSync } = require('child_process');
L31:
High
Child Process
Package source references child process execution.
runtime/project.cjsView on unpkg · L29lib/installer.cjsView file
131L132: function codexInfo(cwd, env = process.env) {
L133: try {
L134: const output = execFileSync('codex', ['--version'], { cwd, env, encoding: 'utf8', timeout: 5000 }).trim();
L135: return { installed: true, output, version: parseVersion(output) };
...
L142: try {
L143: const response = await fetch(url, { ...init, signal: controller.signal });
L144: let data = null;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
lib/installer.cjsView on unpkg · L131•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
'use strict';
const fs = require('fs');
const os = require('os');
const path = require('path');
const { execfilesync } = require('child_process');
const { codexhome, datahome, loadconfig, saveconfig, configpath, getapikey, apikeysource } = require('../runtime/config.cjs');
const { resolveproject } = require('../runtime/project.cjs');
const { mcp_endpoint, integration_version } = require('../runtime/constants.cjs');
const {
installtoml, uninstalltoml, installagents, uninstallagents, readtext, replaceblock,
hasunmanagedmemoryroutertable, toml_start, toml_end, agents_start, agents_end,
} = require('./managed.cjs');
const { installhooks, uninstallhooks, isownedhook, managedgrou
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
lib/installer.cjsView on unpkg27'AGENTS.md'),
runtimeDir: path.join(home, 'memoryrouter', 'runtime'),
};
}
const project = resolveProject(options.projectDir || process.cwd());
return {
scope,
Low
Ai Review Evidence
The installer writes Codex configuration and registers hooks when init is called.
lib/installer.cjsView on unpkg · L27bin/cli.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = memoryrouter-codex@1.5.0
matchedIdentity = npm:bWVtb3J5cm91dGVyLWNvZGV4:1.5.0
similarity = 0.467
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.cjsView on unpkgpackage.jsonView file
1{
"name": "memoryrouter-codex",
"version": "1.7.0",
"description": "Automatic MemoryRouter memory for OpenAI Codex: one vault shared by every session, repo and tool, including Claude Code",
"license": "MIT",
"type": "commonjs",
"bin": {
"memoryrouter-codex": "bin/cli.cjs"
},
"files": [
"bin/",
"lib/",
"runtime/",
"README.md",
"RESEARCH.md",
"LICENSE"
],
"engines": {
"node": ">=18"
},
"scripts": {
"test": "node --test test/*.test.cjs",
"typecheck": "node --check bin/cli.cjs && for f in lib/*.cjs runtime/*.cjs; do node --check \"$f\
Low
Ai Review Evidence
package.json exposes a CLI entry point; its scripts are development and packaging commands.
package.jsonView on unpkg · L1Findings
4 High2 Medium6 Low
HighChild Processruntime/project.cjs
HighSame File Env Network Executionlib/installer.cjs
HighTrigger Reachable External Ai Agent Control Surface Mutationlib/installer.cjs
HighPrevious Version Dangerous Deltabin/cli.cjs
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencelib/installer.cjs
Affected versions and remediation
This report applies to memoryrouter-codex@1.7.0.
See all versions of memoryrouter-codex for other recorded verdicts.
- Review the evidence and your use of memoryrouter-codex@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.