registry / sneakoscope / 6.1.0

sneakoscope@6.1.0

⚠ Under review

Proof-first Codex trust layer for bounded agent workflows, search visibility evidence, and release integrity gates.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,890 file(s), 9.26 MB of source, external domains: 127.0.0.1, api.github.com, api.openai.com, cache.example.test, custom.context7.example, developers.google.com, developers.openai.com, docs.example.com, docs.getdesign.app, docs.npmjs.com, example.com, example.invalid, example.supabase.co, example.test, getdesign.md, github.com, lb.example.com, lb.example.test, learn.chatgpt.com, llmstxt.org, mcp.context7.com, mcp.example.test, mcp.supabase.com, openai.com, openrouter.ai, override.invalid, raw.githubusercontent.com, registry.npmjs.org, schema.org, supabase.example, support.claude.com, www.apple.com, www.npmjs.com, www.sitemaps.org, zellij.dev

Source & flagged code

11 flagged

package.jsonView file

Lines 88-128json

88 "build:clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('.sneakoscope/cache/tsbuildinfo',{recursive:true,force:true})\" && tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",

89 "build:incremental": "tsc -p tsconfig.json && node ./dist/scripts/ensure-bin-executable.js && node ./dist/scripts/build-dist.js",

90 "test": "node ./dist/scripts/canonical-test-runner.js",

91 "prepublishOnly": "node ./dist/scripts/prepublish-release-check-or-fast.js && node ./dist/scripts/release-check-stamp.js verify && node ./dist/scripts/package-published-contract-check.js && node ./dist/scripts/release-registry-check.js --require-unpublished --require-publish-auth",

92 "runtime:no-src-mjs": "node ./dist/scripts/runtime-no-src-mjs-check.js",

93 "runtime:ts-source-of-truth": "node ./dist/scripts/runtime-ts-source-of-truth-check.js",

94 "architecture:guard": "node ./dist/scripts/architecture-guard-check.js",

95 "runtime:dist-parity": "node ./dist/scripts/runtime-dist-parity-check.js",

96 "release:check": "npm run release:check:affected",

97 "release:metadata": "node ./dist/scripts/release-metadata-check.js",

98 "release:version-truth": "node ./dist/scripts/release-version-truth-check.js",

99 "release:dist-freshness": "node ./dist/scripts/release-dist-freshness-check.js",

100 "release:provenance": "node ./dist/scripts/release-provenance-check.js",

101 "release:gate-script-parity": "node ./dist/scripts/release-gate-script-parity-check.js",

102 "ppt:real-imagegen-wiring": "node ./dist/scripts/ppt-real-imagegen-wiring-check.js",

103 "ux-review:run-wires-imagegen": "node ./dist/scripts/ux-review-run-wires-imagegen-check.js",

104 "typecheck": "tsc -p tsconfig.json --noEmit",

105 "schema:check": "node ./dist/scripts/check-runtime-schemas.js",

106 "repo-audit": "node ./dist/scripts/repo-audit.js",

107 "secret:preservation-guard": "node ./dist/scripts/secret-preservation-guard-check.js",

108 "postinstall": "node ./dist/bin/sks.js postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L108

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L108

109 "doctor:fix-production-blackbox": "node ./dist/scripts/doctor-fix-production-blackbox.js",

110 "doctor:startup-config-repair-blackbox": "node ./dist/scripts/doctor-startup-config-repair-blackbox.js",

111 "doctor:context7-mcp-repair-blackbox": "node ./dist/scripts/doctor-context7-mcp-repair-blackbox.js",

112 "doctor:supabase-mcp-repair-blackbox": "node ./dist/scripts/doctor-supabase-mcp-repair-blackbox.js",

113 "codex:0140-capability": "node ./dist/scripts/codex-0140-capability-check.js",

114 "codex:0140-feature-probes": "node ./dist/scripts/codex-0140-feature-probes-check.js",

115 "native-capability:postcheck": "node ./dist/scripts/native-capability-postcheck-check.js",

116 "runtime:ts-rust-boundary": "node ./dist/scripts/runtime-ts-rust-boundary-check.js",

117 "codex:permission-profiles": "node ./dist/scripts/codex-permission-profiles-check.js",

118 "mcp:tool-naming-parity": "node ./dist/scripts/mcp-tool-naming-parity-check.js",

119 "runtime:no-tmux": "node ./dist/scripts/runtime-no-tmux-check.js",

120 "zellij:capability": "node ./dist/scripts/zellij-capability-check.js",

121 "zellij:layout-valid": "node ./dist/scripts/zellij-layout-valid-check.js",

122 "zellij:doctor-readiness": "node ./dist/scripts/zellij-doctor-readiness-check.js",

123 "codex:project-config-policy-splitter": "node ./dist/scripts/codex-project-config-policy-splitter-check.js",

124 "migration:upgrade-safety": "node ./dist/scripts/legacy-upgrade-matrix-check.js",

125 "secret:supabase-preservation-blackbox": "node ./dist/scripts/supabase-secret-preservation-blackbox.js",

126 "update:preserves-supabase-keys": "node ./dist/scripts/update-preserves-supabase-keys-blackbox.js",

127 "packcheck": "for d in bin test; do [ -d \"$d\" ] && find \"$d\" -name '*.mjs' -print0; done | xargs -0 -n1 node --check && npm run runtime:no-src-mjs",

128 "changelog:check": "node ./dist/scripts/changelog-check.js",

dist/core/codex/managed-proxy-env.jsView file

Lines 23-50javascript

23}

24export function detectManagedProxyEnv(env = process.env) {

25 const childEnv = managedProxyEnvForChild(env);

26 const redacted

dist/core/fsx.jsView file

Lines 1-25javascript

1import fs from 'node:fs';

2import fsp from 'node:fs/promises';

3import path from 'node:path';

4import os from 'node:os';

dist/core/release/release-gate-batch-runner.jsView file

Lines 38-78javascript

38 const result = await runOne(root, runId, reportRoot, gate);

39 results.push(result);

40 if (input.reportRoot)

41 writeChildResult(input.reportRoot, result);

42 }

dist/core/agent-bridge/mcp-server.jsView file

Lines 1-30javascript

1import { fileURLToPath } from 'node:url';

2import { buildAgentManifest } from './agent-manifest.js';

3import { AGENT_MODE_ENV_PASSTHROUGH } from './agent-mode.js';

4import { exists, runProcess } from '../fsx.js'

dist/core/super-search/doctor.jsView file

Lines 64-97javascript

64 next_actions: diagnostics.next_actions,

65 evidence_paths: [...diagnostics.evidence_paths, ...(smoke || smokeFreshness.available ? [path.relative(process.cwd(), smokeReportPath)] : [])],

66 warnings: [...

dist/core/doctor/doctor-dirty-planner.jsView file

Lines 1-22javascript

1import fs from 'node:fs';

2import path from 'node:path';

3import { spawnSync } from 'node:child_process';

4import { MANAGED_ASSET_VERSION } from '../managed-assets/managed-assets-manifest.js'

dist/cli/install-helpers.jsView file

3178const chainCalls = []; L3179: const okChain = await checkCodexLbResponseChain({ base_url: 'https://lb.example.test/backend-api/codex', env_path: path.join(codexLbHome, '.codex', 'sk[redacted]') }, { L3180: apiKey: 'sk-test', ... L3182: fetch: async (url, init) => { L3183: chainCalls.push({ url, body: JSON.parse(init.body) }); L3184: return new Response(JSON.stringify({ id: chainCalls.length === 1 ? 'resp_selftest_1' : 'resp_selftest_2' }), { status: 200, headers: { 'content-type': 'application/json' } }); ... L3192: try { L3193: globalThis.fetch = async (url, init) => { L3194: cacheCalls.push({ url, body: JSON.parse(init.body) });

Critical

Builtin Api Tampering Exfiltration

Source mutates builtin networking, serialization, module-loading, or filesystem APIs while forwarding data to an external endpoint.

dist/cli/install-helpers.jsView on unpkg · L3178

dist/scripts/release-registry-check.jsView file

1#!/usr/bin/env node L2: import { spawnSync } from 'node:child_process'; L3: import fs from 'node:fs'; ... L7: const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..'); L8: const expectedRegistry = 'https://registry.npmjs.org/'; L9: const requireUnpublished = process.argv.includes('--require-unpublished'); L10: const requirePublishAuth = process.argv.includes('--require-publish-auth'); L11: const skipNetwork = process.env.SKS_SKIP_REGISTRY_NETWORK_CHECK === '1'; L12: const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm'; L13: function fail(message, detail = '') { ... L25: try { L26: return JSON.parse(fs.readFileSync(path.join(root, file), 'utf8'));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/scripts/release-registry-check.jsView on unpkg · L1

dist/bin/install.jsView file

1#!/usr/bin/env node L2: const { spawnSync } = require('node:child_process'); L3: const args = process.argv.slice(2); ... L10: if (!['install', 'setup', 'bootstrap'].includes(command)) { L11: console.error('Usage: npx sneakoscope install [--yes|--no-tui]'); L12: process.exit(2);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/bin/install.jsView on unpkg · L1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code