registry / vigiles / 12.0.0

vigiles@12.0.0

Lint & test the harness your AI agent runs on — verify the references in your CLAUDE.md / AGENTS.md and test that your hooks and skills actually work.

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 144 file(s), 1.31 MB of source, external domains: 127.0.0.1, code.claude.com, example.com, github.com, json-schema.org, vigiles.dev

Source & flagged code

4 flagged

dist/dialect-drift.jsView file

Lines 27-67javascript

27 * proprietary package into an MIT dep tree, (b) couple the harness-agnostic core to

28 * a Claude-Code-only package, and (c) not even give us `builtinAgentTools` (the SDK

29 * union is input-SCHEMA names like `FileReadInput`/`CronCreateInput` — a superset in

30 * a different vocabulary than the subagent `tools:` catalog). Reading the local file

31 * + a hand-authored list of bare identifiers (facts) is the deliberate ToS-clean

32 * design; this drift alarm is what keeps the hand-list honest.

33 *

34 * NOTE (CC ≥ ~2.1.18x): CC switched to a NATIVE-BINARY distribution — the npm

35 * package ships `bin/claude.exe` (from a platform `optionalDependencies` package),

36 * NOT a readable `cli.js` JS bundle. So the old "grep hook-event string literals out

37 * of cli.js" check has no bundle to read and degrades to a LOUD SKIP (see

38 * `findClaudeCodeBundle`); `sdk-tools.d.ts` is still shipped, so the tool-type drift

39 * alarm keeps working.

40 *

41 * Pure parsers (testable with fixtures) + a local-install locator. TWO consumers:

42 * the gated CI test in `dialect-drift.test.ts` (fails loud on tool/event drift), and

43 * `vigiles audit` at runtime via `checkDialectDrift`/`formatDialectDrift` (a best-effort,

44 * read-local freshness WARN when the installed CC's tool surface drifts from ours).

45 */

46const node_fs_1 = require("node:fs");

47const node_path_1 = require("node:path");

48const node_child_process_1 = require("node:child_process");

49/**

High

Child Process

Package source references child process execution.

dist/dialect-drift.jsView on unpkg · L47

50 * The Claude Code version `ACKNOWLEDGED_TOOL_INPUT_TYPES` + the dialect were last

51 * validated against. SINGLE SOURCE OF TRUTH for the pin: CI installs

52 * `@anthropic-ai/claude-code@<this>` (grepped from this line) in every job that

53 * drives the real binary, so the dialect-drift alarm fires only on a DELIBERATE

54 * bump — not on every unpinned CC release landing on an unrelated PR — and the

55 * real-`claude` harness/eval tests stay reproducible. Bump this together with

56 * `ACKNOWLEDGED_TOOL_INPUT_TYPES` (the gated test cross-checks them).

57 */

58exports.VALIDATED_CC_VERSION = "2.1.187";

59/**

60 * The `<X>Input` interface names we've ACKNOWLEDGED from `sdk-tools.d.ts` (Claude

61 * Code 2.1.187). The drift test fails when the installed set differs — a loud nudge

62 * to re-check `claudeCodeDialect` (and update this set) when CC adds/removes a tool.

63 * NOT a redistribution of their file: a list of bare identifiers (facts), authored here.

64 *

65 * 2.1.187 added the agent-PLATFORM surface (cron/scheduling/worktrees/web-app):

66 * Artifact, Cron{Create,Delete,List}, Enter/ExitWorktree, EnterPlanMode, Monitor,

67 * Projects, PushNotification, REPL, ReadMcpResourceDir, RemoteTrigger,

dist/eval-baseline.jsView file

Lines 6-46javascript

6exports.diffReports = diffReports;

7exports.formatBaselineDiff = formatBaselineDiff;

8exports.diffToJUnit = diffToJUnit;

9exports.readBaseline = readBaseline;

10exports.writeBaseline = writeBaseline;

11/**

12 * vigiles — eval regression gating (Phase C).

13 *

dist/cli.jsView file

Lines 102-142javascript

102 for (const distPath of candidates) {

103 if ((0, node_fs_1.existsSync)(distPath)) {

104 try {

105 const mod = (await import(distPath));

106 // CJS double-default: `{ default: { default: spec } }`.

hooks/post-edit.shView file

•path = hooks/post-edit.sh kind = build_helper sizeBytes = 887 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/post-edit.shView on unpkg

Source & flagged code

4 flagged · loading source

dist/dialect-drift.jsView file

47const node_path_1 = require("node:path"); L48: const node_child_process_1 = require("node:child_process"); L49: /**

High

Child Process

Package source references child process execution.

dist/dialect-drift.jsView on unpkg · L47

dist/eval-baseline.jsView file

26*/ L27: const node_fs_1 = require("node:fs"); L28: const node_path_1 = require("node:path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/eval-baseline.jsView on unpkg · L26

dist/cli.jsView file

122const script = `import(${JSON.stringify(fullPath)}).then(m => { const d = m.default?.default ?? m.default; console.log(JSON.stringify(d)); })`; L123: const output = execSync(`npx tsx -e '${script.replace(/'/g, "'\\''")}'`, { L124: encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L122

hooks/post-edit.shView file

•path = hooks/post-edit.sh kind = build_helper sizeBytes = 887 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/post-edit.shView on unpkg

Findings

2 High5 Medium5 Low

HighChild Processdist/dialect-drift.js

HighRuntime Package Installdist/cli.js

MediumDynamic Requiredist/eval-baseline.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperhooks/post-edit.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/dialect-drift.jsView file

Lines 27-67javascript

27 * proprietary package into an MIT dep tree, (b) couple the harness-agnostic core to

28 * a Claude-Code-only package, and (c) not even give us `builtinAgentTools` (the SDK

29 * union is input-SCHEMA names like `FileReadInput`/`CronCreateInput` — a superset in

30 * a different vocabulary than the subagent `tools:` catalog). Reading the local file

31 * + a hand-authored list of bare identifiers (facts) is the deliberate ToS-clean

32 * design; this drift alarm is what keeps the hand-list honest.

33 *

34 * NOTE (CC ≥ ~2.1.18x): CC switched to a NATIVE-BINARY distribution — the npm

35 * package ships `bin/claude.exe` (from a platform `optionalDependencies` package),

36 * NOT a readable `cli.js` JS bundle. So the old "grep hook-event string literals out

37 * of cli.js" check has no bundle to read and degrades to a LOUD SKIP (see

38 * `findClaudeCodeBundle`); `sdk-tools.d.ts` is still shipped, so the tool-type drift

39 * alarm keeps working.

40 *

41 * Pure parsers (testable with fixtures) + a local-install locator. TWO consumers:

42 * the gated CI test in `dialect-drift.test.ts` (fails loud on tool/event drift), and

43 * `vigiles audit` at runtime via `checkDialectDrift`/`formatDialectDrift` (a best-effort,

44 * read-local freshness WARN when the installed CC's tool surface drifts from ours).

45 */

46const node_fs_1 = require("node:fs");

47const node_path_1 = require("node:path");

48const node_child_process_1 = require("node:child_process");

49/**

High

Child Process

Package source references child process execution.

dist/dialect-drift.jsView on unpkg · L47

50 * The Claude Code version `ACKNOWLEDGED_TOOL_INPUT_TYPES` + the dialect were last

51 * validated against. SINGLE SOURCE OF TRUTH for the pin: CI installs

52 * `@anthropic-ai/claude-code@<this>` (grepped from this line) in every job that

53 * drives the real binary, so the dialect-drift alarm fires only on a DELIBERATE

54 * bump — not on every unpinned CC release landing on an unrelated PR — and the

55 * real-`claude` harness/eval tests stay reproducible. Bump this together with

56 * `ACKNOWLEDGED_TOOL_INPUT_TYPES` (the gated test cross-checks them).

57 */

58exports.VALIDATED_CC_VERSION = "2.1.187";

59/**

60 * The `<X>Input` interface names we've ACKNOWLEDGED from `sdk-tools.d.ts` (Claude

61 * Code 2.1.187). The drift test fails when the installed set differs — a loud nudge

62 * to re-check `claudeCodeDialect` (and update this set) when CC adds/removes a tool.

63 * NOT a redistribution of their file: a list of bare identifiers (facts), authored here.

64 *

65 * 2.1.187 added the agent-PLATFORM surface (cron/scheduling/worktrees/web-app):

66 * Artifact, Cron{Create,Delete,List}, Enter/ExitWorktree, EnterPlanMode, Monitor,

67 * Projects, PushNotification, REPL, ReadMcpResourceDir, RemoteTrigger,

dist/eval-baseline.jsView file

Lines 6-46javascript

6exports.diffReports = diffReports;

7exports.formatBaselineDiff = formatBaselineDiff;

8exports.diffToJUnit = diffToJUnit;

9exports.readBaseline = readBaseline;

10exports.writeBaseline = writeBaseline;

11/**

12 * vigiles — eval regression gating (Phase C).

13 *

dist/cli.jsView file

Lines 102-142javascript

102 for (const distPath of candidates) {

103 if ((0, node_fs_1.existsSync)(distPath)) {

104 try {

105 const mod = (await import(distPath));

106 // CJS double-default: `{ default: { default: spec } }`.

hooks/post-edit.shView file

•path = hooks/post-edit.sh kind = build_helper sizeBytes = 887 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/post-edit.shView on unpkg