registry / savant-code / 0.0.22
savant-code@0.0.22
Multi-Agent AI Coding Assistant with ECHO Protocol
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedlauncher.jsView file
2L3: const { spawn, execFileSync } = require('child_process')
L4: const fs = require('fs')
High
index.jsView file
2L3: const fs = require('fs')
L4: const path = require('path')
Medium
launcher.js#virtual:normalized:round1View file
519/** Ask the user a y/N question on stdin (launcher owns the terminal before
L520: * the child spawns). Resolves false on anything that isn"t y/yes. */\n function askYesNo(question) {\n return new Promise((resolve) => {\n const rl = readline.createInter...
L521: // they"ll just hit the same crash they had before, which is fine.\n if (includeTreeSitterWasm) {\n const tempWasmPath = path.join(\n CONFIG.tempDownloadDir,\n...
L522:
Findings
3 High3 Medium4 Low
HighChild Processlauncher.js
HighSame File Env Network Executionlauncher.js#virtual:normalized:round1
HighCommand Output Exfiltrationlauncher.js#virtual:normalized:round1
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to savant-code@0.0.22.
See all versions of savant-code for other recorded verdicts.
- Review the evidence and your use of savant-code@0.0.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.