registry  /  sisyphi  /  1.2.26

sisyphi@1.2.26

⚠ Under review

tmux-integrated orchestration daemon for Claude Code multi-agent workflows

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsTelemetryUrlStrings
Manifest
WildcardDependency
scanned 9 file(s), 1.35 MB of source, external domains: api.tailscale.com, astral.sh, brew.sh, console.aws.amazon.com, console.hetzner.cloud, developer.hashicorp.com, docs.anthropic.com, git-scm.com, github.com, iterm2.com, json-schema.org, learn.microsoft.com, login.tailscale.com, neovim.io, nodejs.org, registry.npmjs.org

Source & flagged code

8 flagged · loading source
package.jsonView file
•scripts.postinstall = bash native/build-notify.sh || true
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = bash native/build-notify.sh || true
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
dist/daemon.jsView file
86function globalDir() { L87: return join(homedir(), ".sisyphus"); L88: } ... L300: const content = readFileSync(filePath, "utf-8"); L301: return JSON.parse(content); L302: } catch { ... L357: plugin: "sisyphus", L358: gitUrl: "https://github.com/crouton-labs/sisyphus" L359: } ... L1066: ROOT_AFTER_HELP = ` L1067: I/O contract: flags and positional args on input, JSON on stdout (JSONL for streams). L1068:
Medium
Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/daemon.jsView on unpkg · L86
dist/cli.jsView file
15function globalDir() { L16: return join(homedir(), ".sisyphus"); L17: } ... L154: const content = readFileSync2(filePath, "utf-8"); L155: return JSON.parse(content); L156: } catch { ... L211: plugin: "sisyphus", L212: gitUrl: "https://github.com/crouton-labs/sisyphus" L213: } ... L220: import { readFileSync as readFileSync3 } from "fs"; L221: import { execFileSync } from "child_process"; L222: import { homedir as homedir4 } from "os";
Critical
Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L15
15Trigger-reachable chain: manifest.bin -> dist/cli.js L15: function globalDir() { L16: return join(homedir(), ".sisyphus"); L17: } ... L154: const content = readFileSync2(filePath, "utf-8"); L155: return JSON.parse(content); L156: } catch { ... L211: plugin: "sisyphus", L212: gitUrl: "https://github.com/crouton-labs/sisyphus" L213: } ... L220: import { readFileSync as readFileSync3 } from "fs"; L221: import { execFileSync } from "child_process"; L222: import { homedir as homedir4 } from "os";
Critical
Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L15
15function globalDir() { L16: return join(homedir(), ".sisyphus"); L17: } ... L154: const content = readFileSync2(filePath, "utf-8"); L155: return JSON.parse(content); L156: } catch { ... L211: plugin: "sisyphus", L212: gitUrl: "https://github.com/crouton-labs/sisyphus" L213: } ... L220: import { readFileSync as readFileSync3 } from "fs"; L221: import { execFileSync } from "child_process"; L222: import { homedir as homedir4 } from "os";
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L15
native/build-notify.shView file
•path = native/build-notify.sh kind = build_helper sizeBytes = 2425 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

native/build-notify.shView on unpkg
native/SisyphusNotify/AppIcon.icnsView file
•path = native/SisyphusNotify/AppIcon.icns kind = high_entropy_blob sizeBytes = 2860163 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

native/SisyphusNotify/AppIcon.icnsView on unpkg

Findings

2 Critical3 High7 Medium6 Low
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitydist/cli.js
HighShips High Entropy Blobnative/SisyphusNotify/AppIcon.icns
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/daemon.js
MediumShips Build Helpernative/build-notify.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings