registry / sneakoscope / 5.6.0

sneakoscope@5.6.0

⚠ Under review

Sneakoscope Codex: fast proof-first Codex trust layer with image-based Voxel TriWiki.

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,910 file(s), 8.81 MB of source, external domains: 127.0.0.1, api.github.com, api.openai.com, cache.example.test, custom.context7.example, deploymentsafety.openai.com, developers.google.com, developers.openai.com, docs.example.com, docs.getdesign.app, docs.npmjs.com, example.com, example.invalid, example.supabase.co, example.test, getdesign.md, github.com, lb.example.com, lb.example.test, llmstxt.org, mcp.context7.com, mcp.example.test, mcp.supabase.com, openai.com, openrouter.ai, raw.githubusercontent.com, registry.npmjs.org, schema.org, supabase.example, support.claude.com, www.apple.com, www.npmjs.com, www.sitemaps.org, zellij.dev

Source & flagged code

11 flagged

package.jsonView file

Lines 73-113json

73 "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",

74 "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",

75 "release:check": "npm run release:check:affected --silent",

76 "release:metadata": "node ./dist/scripts/release-metadata-check.js",

77 "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",

78 "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",

79 "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",

80 "release:check:parallel": "npm run build --silent && node ./dist/scripts/release-parallel-check.js && node ./dist/scripts/release-check-stamp.js write",

81 "release:check:legacy": "npm run release:check:parallel --silent",

82 "release:dag-full-coverage": "node ./dist/scripts/release-dag-full-coverage-check.js",

83 "core-skill:route-runtime-integration": "node ./dist/scripts/core-skill-route-runtime-integration-check.js",

84 "core-skill:no-drift": "node ./dist/scripts/core-skill-no-drift-check.js",

85 "typecheck": "tsc -p tsconfig.json --noEmit",

86 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

87 "repo-audit": "node ./dist/scripts/repo-audit.js",

88 "native-capability:postcheck": "node ./dist/scripts/native-capability-postcheck-check.js",

89 "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",

90 "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",

91 "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",

92 "skill:dedupe-blackbox": "node ./dist/scripts/project-skill-dedupe-blackbox.js",

93 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L93

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L93

94 "selftest": "node ./dist/bin/sks.js selftest --mock",

95 "doctor": "node ./dist/bin/sks.js doctor",

96 "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",

97 "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",

98 "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",

99 "doctor:supabase-mcp-repair-blackbox": "node ./dist/scripts/doctor-supabase-mcp-repair-blackbox.js",

100 "codex:config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --json",

101 "codex:actual-config-load-probe": "node ./dist/scripts/codex-config-load-probe.js --actual-codex --json",

102 "codex:0140-capability": "node ./dist/scripts/codex-0140-capability-check.js",

103 "codex:0140-feature-probes": "node ./dist/scripts/codex-0140-feature-probes-check.js",

104 "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",

105 "release:check:dynamic": "node ./dist/scripts/release-check-dynamic.js",

106 "release:check:dynamic:execute": "node ./dist/scripts/release-check-dynamic-execute.js",

107 "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",

108 "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",

109 "runtime:no-tmux": "node ./dist/scripts/runtime-no-tmux-check.js",

110 "zellij:capability": "node ./dist/scripts/zellij-capability-check.js",

111 "zellij:layout-valid": "node ./dist/scripts/zellij-layout-valid-check.js",

112 "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",

113 "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 37-77javascript

37 const result = await runOne(root, runId, reportRoot, gate);

38 results.push(result);

39 if (input.reportRoot)

40 writeChildResult(input.reportRoot, result);

41 }

dist/core/agent-bridge/mcp-server.jsView file

Lines 1-30javascript

1import { fileURLToPath } from 'node:url';

2import { buildAgentManifest } from './agent-manifest.js';

3import { AGENT_MODE_ENV_PASSTHROUGH } from './agent-mode.js';

4import { exists, runProcess } from '../fsx.js'

dist/core/doctor/doctor-dirty-planner.jsView file

Lines 1-22javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import { spawnSync } from 'node:child_process';

4import { MANAGED_ASSET_VERSION } from '../managed-assets/managed-assets-manifest.js'

dist/cli/install-helpers.jsView file

3354const chainCalls = []; L3355: const okChain = await checkCodexLbResponseChain({ base_url: 'https://lb.example.test/backend-api/codex', env_path: path.join(codexLbHome, '.codex', 'sk[redacted]') }, { L3356: apiKey: 'sk-test', ... L3358: fetch: async (url, init) => { L3359: chainCalls.push({ url, body: JSON.parse(init.body) }); L3360: return new Response(JSON.stringify({ id: chainCalls.length === 1 ? 'resp_selftest_1' : 'resp_selftest_2' }), { status: 200, headers: { 'content-type': 'application/json' } }); ... L3368: try { L3369: globalThis.fetch = async (url, init) => { L3370: cacheCalls.push({ url, body: JSON.parse(init.body) });

Critical

Builtin Api Tampering Exfiltration

Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.

dist/cli/install-helpers.jsView on unpkg · L3354

dist/scripts/release-registry-check.jsView file

1#!/usr/bin/env node L2: import { spawnSync } from 'node:child_process'; L3: import fs from 'node:fs'; ... L7: const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..'); L8: const expectedRegistry = 'https://registry.npmjs.org/'; L9: const requireUnpublished = process.argv.includes('--require-unpublished'); L10: const requirePublishAuth = process.argv.includes('--require-publish-auth'); L11: const skipNetwork = process.env.SKS_SKIP_REGISTRY_NETWORK_CHECK === '1'; L12: const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm'; L13: function fail(message, detail = '') { ... L25: try { L26: return JSON.parse(fs.readFileSync(path.join(root, file), 'utf8'));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/scripts/release-registry-check.jsView on unpkg · L1

dist/bin/install.jsView file

1#!/usr/bin/env node L2: import { spawnSync } from 'node:child_process'; L3: const args = process.argv.slice(2); ... L10: if (!['install', 'setup', 'bootstrap'].includes(command)) { L11: console.error('Usage: npx sneakoscope install [--yes|--no-tui]'); L12: process.exit(2);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/install.jsView on unpkg · L1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code