registry / ozali / 0.9.0

ozali@0.9.0

Bootstrap interactivo de IA por equipo: calibra el proyecto, genera la skill de ejecución (cdk) con TDD/SDD, y mantiene memoria de equipo (Engram) con histórico aislado.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 113 KB of source, external domains: 127.0.0.1, api.github.com, brew.sh, github.com, go.dev, obsidian.md, opencode.ai

Source & flagged code

1 flagged

cli/lib/commands.mjsView file

Lines 2-42javascript

2import fs from "node:fs";

3import path from "node:path";

4import os from "node:os";

5import {

6 c, ok, warn, err, info, step,

7 SKILL_SRC, COMMIT_SKILL_SRC, TEMPLATES_SRC, exists, ensureDir, copyDir, readJSON, writeJSON,

8 ensureGitignore, tryExec, spawnCmd, which, engramAssetName, pickEngramAsset,

9 projectName, pkgVersion, DEFAULT_KNOWLEDGE, HOME, openURL, gitInfo,

10 toPortablePath, fromPortablePath,

11} from "./util.mjs";

12import { detectAll, detectWorkspace, detectReferences } from "./detect.mjs";

13import { ask, confirm, select } from "./prompt.mjs";

15const CONFIG_PATH = (cwd) => path.join(cwd, ".ozali", "config.json");

16const TEAM_CLOUD_PATH = (cwd) => path.join(cwd, ".ozali", "cloud.json");

17const ENGRAM_CONFIG_PATH = (cwd) => path.join(cwd, ".engram", "config.json");

18const CLOUD_TOKEN_ENV = "ENGRAM_CLOUD_TOKEN";

19const CLOUD_AUTOSYNC_ENV = "ENGRAM_CLOUD_AUTOSYNC";

20const CLOUD_SERVER_ENV = "ENGRAM_CLOUD_SERVER";

22function skillTarget(cwd, scope) {

23 const base = scope === "global" ? path.join(process.env.HOME || "", ".claude") : path.join(cwd, ".claude");

24 return path.join(base, "skills", "ozali");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli/lib/commands.mjsView on unpkg · L22

25}

27function commitSkillTarget(cwd, scope) {

28 const base = scope === "global" ? path.join(process.env.HOME || "", ".claude") : path.join(cwd, ".claude");

29 return path.join(base, "skills", "ozali-commit");

30}

32function readTeamCloud(cwd) {

33 return readJSON(TEAM_CLOUD_PATH(cwd));

34}

36function writeTeamCloud(cwd, cloud) {

37 writeJSON(TEAM_CLOUD_PATH(cwd), {

38 server: cloud.server,

39 project: cloud.project,

40 enrolled: !!cloud.enabled,

41 auth_required: cloud.authRequired !== false,

42 token_env: cloud.tokenEnv || CLOUD_TOKEN_ENV,

Source & flagged code

1 flagged · loading source

cli/lib/commands.mjsView file

22function skillTarget(cwd, scope) { L23: const base = scope === "global" ? path.join(process.env.HOME || "", ".claude") : path.join(cwd, ".claude"); L24: return path.join(base, "skills", "ozali"); ... L134: info("Actualizando Engram…"); L135: if (process.platform === "darwin" && which("brew")) { L136: spawnCmd("brew", ["upgrade", "gentleman-programming/tap/engram"]); ... L183: if (installObsidian) { L184: const url = process.platform === "darwin" ? "https://obsidian.md/download" L185: : process.platform === "win32" ? "https://obsidian.md/download" ... L299: let releases; L300: try { releases = JSON.parse(raw); } catch { return null; } L301: if (!Array.isArray(releases)) return null;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli/lib/commands.mjsView on unpkg · L22

Findings

3 Medium4 Low

MediumDynamic Require

MediumEnvironment Vars

MediumInstall Persistencecli/lib/commands.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

cli/lib/commands.mjsView file

Lines 2-42javascript

2import fs from "node:fs";

3import path from "node:path";

4import os from "node:os";

5import {

6 c, ok, warn, err, info, step,

7 SKILL_SRC, COMMIT_SKILL_SRC, TEMPLATES_SRC, exists, ensureDir, copyDir, readJSON, writeJSON,

8 ensureGitignore, tryExec, spawnCmd, which, engramAssetName, pickEngramAsset,

9 projectName, pkgVersion, DEFAULT_KNOWLEDGE, HOME, openURL, gitInfo,

10 toPortablePath, fromPortablePath,

11} from "./util.mjs";

12import { detectAll, detectWorkspace, detectReferences } from "./detect.mjs";

13import { ask, confirm, select } from "./prompt.mjs";

15const CONFIG_PATH = (cwd) => path.join(cwd, ".ozali", "config.json");

16const TEAM_CLOUD_PATH = (cwd) => path.join(cwd, ".ozali", "cloud.json");

17const ENGRAM_CONFIG_PATH = (cwd) => path.join(cwd, ".engram", "config.json");

18const CLOUD_TOKEN_ENV = "ENGRAM_CLOUD_TOKEN";

19const CLOUD_AUTOSYNC_ENV = "ENGRAM_CLOUD_AUTOSYNC";

20const CLOUD_SERVER_ENV = "ENGRAM_CLOUD_SERVER";

22function skillTarget(cwd, scope) {

23 const base = scope === "global" ? path.join(process.env.HOME || "", ".claude") : path.join(cwd, ".claude");

24 return path.join(base, "skills", "ozali");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli/lib/commands.mjsView on unpkg · L22

25}

27function commitSkillTarget(cwd, scope) {

28 const base = scope === "global" ? path.join(process.env.HOME || "", ".claude") : path.join(cwd, ".claude");

29 return path.join(base, "skills", "ozali-commit");

30}

32function readTeamCloud(cwd) {

33 return readJSON(TEAM_CLOUD_PATH(cwd));

34}

36function writeTeamCloud(cwd, cloud) {

37 writeJSON(TEAM_CLOUD_PATH(cwd), {

38 server: cloud.server,

39 project: cloud.project,

40 enrolled: !!cloud.enabled,

41 auth_required: cloud.authRequired !== false,

42 token_env: cloud.tokenEnv || CLOUD_TOKEN_ENV,