registry / sneakoscope / 4.8.5

sneakoscope@4.8.5

⚠ Under review

Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,942 file(s), 8.43 MB of source, external domains: 127.0.0.1, api.github.com, api.openai.com, cache.example.test, custom.context7.example, deploymentsafety.openai.com, developers.google.com, developers.openai.com, docs.example.com, docs.getdesign.app, docs.npmjs.com, example.com, example.invalid, example.supabase.co, example.test, getdesign.md, github.com, lb.example.com, lb.example.test, llmstxt.org, mcp.context7.com, mcp.example.test, mcp.supabase.com, openai.com, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, schema.org, supabase.example, support.claude.com, www.apple.com, www.npmjs.com, www.sitemaps.org, zellij.dev

Source & flagged code

11 flagged

package.jsonView file

Lines 69-109json

69 "typecheck:contracts": "node ./dist/scripts/check-ts-contracts.js",

70 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

71 "seo:cli-blackbox": "node ./dist/scripts/seo-cli-blackbox-check.js",

72 "seo:audit-fixture": "node ./dist/scripts/seo-audit-fixture-check.js",

73 "seo:no-mutation-by-default": "node ./dist/scripts/seo-no-mutation-by-default-check.js",

74 "seo:mutation-rollback": "node ./dist/scripts/seo-mutation-rollback-check.js",

75 "seo:canonical-sitemap-locale": "node ./dist/scripts/seo-canonical-locale-check.js",

76 "seo:structured-data-visible-content": "node ./dist/scripts/seo-structured-data-visible-content-check.js",

77 "geo:cli-blackbox": "node ./dist/scripts/geo-cli-blackbox-check.js",

78 "geo:claim-evidence": "node ./dist/scripts/geo-claim-evidence-check.js",

79 "geo:crawler-purpose-policy": "node ./dist/scripts/geo-crawler-policy-check.js",

80 "geo:llms-txt-optional": "node ./dist/scripts/geo-llms-txt-optional-check.js",

81 "seo-geo:route-identity": "node ./dist/scripts/seo-geo-route-identity-check.js",

82 "seo-geo:geo-disambiguation": "node ./dist/scripts/seo-geo-geo-disambiguation-check.js",

83 "seo-geo:skill-rich-content": "node ./dist/scripts/seo-geo-skill-rich-content-check.js",

84 "seo-geo:no-unsupported-ranking-claims": "node ./dist/scripts/seo-geo-no-unsupported-ranking-claims-check.js",

85 "seo-geo:feature-fixture-quality": "node ./dist/scripts/seo-geo-feature-fixture-quality-check.js",

86 "package-boundary:check": "node ./dist/scripts/check-package-boundary.js",

87 "blackbox:command-import-smoke": "node ./dist/scripts/blackbox-command-import-smoke.js",

88 "repo-audit": "node ./dist/scripts/repo-audit.js",

89 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L89

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L89

90 "selftest": "node ./dist/bin/sks.js selftest --mock",

91 "doctor": "node ./dist/bin/sks.js doctor",

92 "codex:config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --json",

93 "codex:actual-config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --actual-codex --json",

94 "codex:config-eperm-fixture": "node ./dist/scripts/codex-config-eperm-fixture.js",

95 "doctor:fix-proves-codex-read": "node ./dist/scripts/doctor-fix-proves-codex-read-check.js",

96 "doctor:fix-recovers-corrupted-config": "node ./dist/scripts/doctor-fix-recovers-corrupted-config-check.js",

97 "doctor:context7-repair": "node ./dist/scripts/doctor-context7-repair-check.js",

98 "doctor:codex-startup-repair": "node ./dist/scripts/doctor-codex-startup-repair-check.js",

99 "doctor:warning-only-not-blocker": "node ./dist/scripts/doctor-warning-only-not-blocker-check.js",

100 "doctor:post-repair-authoritative": "node ./dist/scripts/doctor-post-repair-authoritative-check.js",

101 "doctor:transaction-owns-mutations": "node ./dist/scripts/doctor-transaction-owns-mutations-check.js",

102 "doctor:plain-fix-native-assets": "node ./dist/scripts/doctor-plain-fix-native-assets-check.js",

103 "managed-assets:role-manifest-parity": "node ./dist/scripts/managed-role-manifest-parity-check.js",

104 "git:machine-local-evidence-zero": "node ./dist/scripts/machine-local-evidence-zero-check.js",

105 "codex-native:0142-doctor-wiring": "node ./dist/scripts/codex-0142-doctor-wiring-check.js",

106 "update:doctor-lifecycle": "node ./dist/scripts/update-doctor-lifecycle-check.js",

107 "update:new-binary-reexec": "node ./dist/scripts/update-new-binary-reexec-check.js",

108 "update:first-command-migration": "node ./dist/scripts/update-first-command-migration-check.js",

109 "update:concurrent-lock": "node ./dist/scripts/update-concurrent-lock-check.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 37-77javascript

37 const result = await runOne(root, runId, reportRoot, gate);

38 results.push(result);

39 if (input.reportRoot)

40 writeChildResult(input.reportRoot, result);

41 }

dist/core/mad-db/mad-db-executor.jsView file

Lines 94-134javascript

94 catch (err) {

95 lastError = err;

96 }

97 }

98 const summary = summarizeMadDbError(lastError);

99 const

dist/scripts/release-readiness-report.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// @ts-nocheck

3import fs from 'node:fs';

4import path from 'node:path';

5import { spawnSync } from 'node:child_process';

dist/cli/install-helpers.jsView file

3237const chainCalls = []; L3238: const okChain = await checkCodexLbResponseChain({ base_url: 'https://lb.example.test/backend-api/codex', env_path: path.join(codexLbHome, '.codex', 'sk[redacted]') }, { L3239: apiKey: 'sk-test', ... L3241: fetch: async (url, init) => { L3242: chainCalls.push({ url, body: JSON.parse(init.body) }); L3243: return new Response(JSON.stringify({ id: chainCalls.length === 1 ? 'resp_selftest_1' : 'resp_selftest_2' }), { status: 200, headers: { 'content-type': 'application/json' } }); ... L3251: try { L3252: globalThis.fetch = async (url, init) => { L3253: cacheCalls.push({ url, body: JSON.parse(init.body) });

Critical

Builtin Api Tampering Exfiltration

Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.

dist/cli/install-helpers.jsView on unpkg · L3237

dist/scripts/blackbox-command-import-smoke.jsView file

5import path from 'node:path'; L6: import { spawnSync } from 'node:child_process'; L7: import { pathToFileURL } from 'node:url'; L8: import { currentDistFreshness } from './lib/ensure-dist-fresh.js'; L9: const root = process.cwd(); L10: const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm'; L11: const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sk[redacted]-')); ... L13: const consumer = path.join(tmp, 'consumer'); L14: const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8')); L15: const failures = []; ... L19: try { L20: if (process.env.SKS_ENSURE_DIST_NO_REBUILD === '1' || process.env.SKS_RELEASE_DIST_FRESHNESS_NO_REBUILD === '1') {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/scripts/blackbox-command-import-smoke.jsView on unpkg · L5

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code