registry / sneakoscope / 6.5.1

sneakoscope@6.5.1

⚠ Under review

Proof-first Codex CLI and ChatGPT Desktop orchestration for AI coding agents, release verification, and macOS menu bar control.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,529 file(s), 9.38 MB of source, external domains: 127.0.0.1, api.github.com, api.openai.com, api.telegram.org, cache.example.test, chatgpt.com, developers.google.com, developers.openai.com, docs.getdesign.app, example.com, example.invalid, example.supabase.co, example.test, getdesign.md, github.com, json-schema.org, lb.example.com, lb.example.test, learn.chatgpt.com, llmstxt.org, mcp.context7.com, mcp.example.test, mcp.supabase.com, nodejs.org, openai.com, openrouter.ai, override.invalid, raw.githubusercontent.com, registry.npmjs.org, sneakoscope.dev, supabase.example, support.claude.com, www.apple.com, www.npmjs.com, www.sitemaps.org, zellij.dev

Source & flagged code

11 flagged

package.jsonView file

Lines 79-119json

79 "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",

80 "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",

81 "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",

82 "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",

83 "release:check": "npm run release:check:affected",

84 "release:metadata": "node ./dist/scripts/release-metadata-check.js",

85 "release:version-truth": "node ./dist/scripts/release-version-truth-check.js",

86 "release:dist-freshness": "node ./dist/scripts/release-dist-freshness-check.js",

87 "release:provenance": "node ./dist/scripts/release-provenance-check.js",

88 "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",

89 "release:file-ownership": "node ./dist/scripts/release-file-ownership-check.js",

90 "release:macos-menubar-proof": "node ./dist/scripts/release-macos-menubar-proof.js",

91 "release:main-push-guard": "node ./dist/scripts/release-main-push-guard.js",

92 "release:main-push-receipt": "node ./dist/scripts/release-main-push-receipt.js",

93 "release:pack-receipt": "node ./dist/scripts/release-pack-receipt.js",

94 "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",

95 "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",

96 "typecheck": "tsc -p tsconfig.json --noEmit",

97 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

98 "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",

99 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L99

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L99

100 "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",

101 "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",

102 "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",

103 "doctor:supabase-mcp-repair-blackbox": "node ./dist/scripts/doctor-supabase-mcp-repair-blackbox.js",

104 "codex:0140-capability": "node ./dist/scripts/codex-0140-capability-check.js",

105 "codex:0140-feature-probes": "node ./dist/scripts/codex-0140-feature-probes-check.js",

106 "native-capability:postcheck": "node ./dist/scripts/native-capability-postcheck-check.js",

107 "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",

108 "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",

109 "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",

110 "runtime:terminal-current": "node ./dist/scripts/runtime-current-terminal-check.js",

111 "zellij:capability": "node ./dist/scripts/zellij-capability-check.js",

112 "zellij:layout-valid": "node ./dist/scripts/zellij-layout-valid-check.js",

113 "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",

114 "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",

115 "migration:upgrade-safety": "node ./dist/scripts/current-upgrade-matrix-check.js",

116 "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",

117 "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",

118 "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",

119 "changelog:check": "node ./dist/scripts/changelog-check.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 38-78javascript

38 const result = await runOne(root, runId, reportRoot, gate);

39 results.push(result);

40 if (input.reportRoot)

41 writeChildResult(input.reportRoot, result);

42 }

dist/core/mad-sks/sql-plane/mcp-executor.jsView file

Lines 110-150javascript

110 catch (err) {

111 lastError = err;

112 }

113 }

114 const summary = summarizeMadSksSqlPlaneError(lastError);

115 const

dist/core/doctor/doctor-dirty-planner.jsView file

Lines 1-22javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import { spawnSync } from 'node:child_process';

4import { MANAGED_ASSET_VERSION } from '../managed-assets/managed-assets-manifest.js'

dist/cli/install-helpers-codex-lb-selftest-chain.jsView file

57const chainCalls = []; L58: const okChain = await checkCodexLbResponseChain({ base_url: 'https://lb.example.test/backend-api/codex', env_path: path.join(codexLbHome, '.codex', 'sk[redacted]') }, { L59: apiKey: 'sk-test', ... L61: fetch: async (url, init) => { L62: chainCalls.push({ url, body: JSON.parse(init.body) }); L63: return new Response(JSON.stringify({ id: chainCalls.length === 1 ? 'resp_selftest_1' : 'resp_selftest_2' }), { status: 200, headers: { 'content-type': 'application/json' } }); ... L71: try { L72: globalThis.fetch = async (url, init) => { L73: cacheCalls.push({ url, body: JSON.parse(init.body) });

Critical

Builtin Api Tampering Exfiltration

Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.

dist/cli/install-helpers-codex-lb-selftest-chain.jsView on unpkg · L57

dist/bin/install.jsView file

1#!/usr/bin/env node L2: const { spawnSync } = require('node:child_process'); L3: const args = process.argv.slice(2); ... L10: if (!['install', 'setup', 'bootstrap'].includes(command)) { L11: console.error('Usage: npx sneakoscope install [--yes|--no-tui]'); L12: process.exit(2);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/install.jsView on unpkg · L1

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView file

•path = dist/native/sks-[redacted].pdf kind = high_entropy_blob sizeBytes = 8488 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/native/sks-menubar/Resources/SKSStatusAttentionTemplate.pdfView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code