registry / sneakoscope / 4.8.7

sneakoscope@4.8.7

⚠ Under review

Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.

Static Scan Results

scanned 16d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,976 file(s), 8.57 MB of source, external domains: 127.0.0.1, api.github.com, api.openai.com, cache.example.test, custom.context7.example, deploymentsafety.openai.com, developers.google.com, developers.openai.com, docs.example.com, docs.getdesign.app, docs.npmjs.com, example.com, example.invalid, example.supabase.co, example.test, getdesign.md, github.com, lb.example.com, lb.example.test, llmstxt.org, mcp.context7.com, mcp.example.test, mcp.supabase.com, openai.com, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, schema.org, supabase.example, support.claude.com, www.apple.com, www.npmjs.com, www.sitemaps.org, zellij.dev

Source & flagged code

11 flagged

package.jsonView file

Lines 49-89json

49 },

50 "scripts": {

51 "build": "npm run build:clean",

52 "build:clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('.sneakoscope/cache/tsbuildinfo',{recursive:true,force:true})\" && tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",

53 "build:incremental": "tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",

54 "check": "npm run release:check:affected",

55 "dev:sks": "npm run build:incremental --silent && node ./dist/bin/sks.js",

56 "prepublishOnly": "npm run release:check:affected",

57 "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",

58 "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",

59 "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",

60 "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",

61 "release:check": "npm run release:check:affected --silent",

62 "release:metadata": "node ./dist/scripts/release-metadata-check.js",

63 "release:check:parallel": "npm run build --silent && node ./dist/scripts/release-parallel-check.js && node ./dist/scripts/release-check-stamp.js write",

64 "release:check:legacy": "npm run release:check:parallel --silent",

65 "core-skill:route-runtime-integration": "node ./dist/scripts/core-skill-route-runtime-integration-check.js",

66 "typecheck": "tsc -p tsconfig.json --noEmit",

67 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

68 "repo-audit": "node ./dist/scripts/repo-audit.js",

69 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L69

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L69

70 "selftest": "node ./dist/bin/sks.js selftest --mock",

71 "doctor": "node ./dist/bin/sks.js doctor",

72 "codex:config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --json",

73 "codex:actual-config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --actual-codex --json",

74 "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",

75 "release:check:dynamic": "node ./dist/scripts/release-check-dynamic.js",

76 "release:check:dynamic:execute": "node ./dist/scripts/release-check-dynamic-execute.js",

77 "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",

78 "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",

79 "runtime:no-tmux": "node ./dist/scripts/runtime-no-tmux-check.js",

80 "zellij:capability": "node ./dist/scripts/zellij-capability-check.js",

81 "zellij:layout-valid": "node ./dist/scripts/zellij-layout-valid-check.js",

82 "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",

83 "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",

84 "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",

85 "changelog:check": "node ./dist/scripts/changelog-check.js",

86 "cli-entrypoint:check": "node ./dist/scripts/check-cli-entrypoint.js",

87 "legacy-free:check": "node ./dist/scripts/check-legacy-free.js",

88 "architecture:check": "node ./dist/scripts/check-architecture.js",

89 "route-modularity:check": "node ./dist/scripts/check-route-modularity.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 37-77javascript

37 const result = await runOne(root, runId, reportRoot, gate);

38 results.push(result);

39 if (input.reportRoot)

40 writeChildResult(input.reportRoot, result);

41 }

dist/core/mad-db/mad-db-executor.jsView file

Lines 94-134javascript

94 catch (err) {

95 lastError = err;

96 }

97 }

98 const summary = summarizeMadDbError(lastError);

99 const

dist/scripts/release-readiness-report.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2// @ts-nocheck

3import fs from 'node:fs';

4import path from 'node:path';

5import { spawnSync } from 'node:child_process';

dist/cli/install-helpers.jsView file

3305const chainCalls = []; L3306: const okChain = await checkCodexLbResponseChain({ base_url: 'https://lb.example.test/backend-api/codex', env_path: path.join(codexLbHome, '.codex', 'sk[redacted]') }, { L3307: apiKey: 'sk-test', ... L3309: fetch: async (url, init) => { L3310: chainCalls.push({ url, body: JSON.parse(init.body) }); L3311: return new Response(JSON.stringify({ id: chainCalls.length === 1 ? 'resp_selftest_1' : 'resp_selftest_2' }), { status: 200, headers: { 'content-type': 'application/json' } }); ... L3319: try { L3320: globalThis.fetch = async (url, init) => { L3321: cacheCalls.push({ url, body: JSON.parse(init.body) });

Critical

Builtin Api Tampering Exfiltration

Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.

dist/cli/install-helpers.jsView on unpkg · L3305

dist/scripts/blackbox-command-import-smoke.jsView file

5import path from 'node:path'; L6: import { spawnSync } from 'node:child_process'; L7: import { pathToFileURL } from 'node:url'; L8: import { currentDistFreshness } from './lib/ensure-dist-fresh.js'; L9: const root = process.cwd(); L10: const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm'; L11: const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'sk[redacted]-')); ... L13: const consumer = path.join(tmp, 'consumer'); L14: const pkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8')); L15: const failures = []; ... L19: try { L20: if (process.env.SKS_ENSURE_DIST_NO_REBUILD === '1' || process.env.SKS_RELEASE_DIST_FRESHNESS_NO_REBUILD === '1') {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/scripts/blackbox-command-import-smoke.jsView on unpkg · L5

dist/scripts/check-runtime-schemas.jsView file

7const root = process.cwd(); L8: const tsc = spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['tsc', '-p', 'tsconfig.json', '--noEmit'], { L9: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/scripts/check-runtime-schemas.jsView on unpkg · L7

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code