registry / wyrm-mcp / 7.3.3

wyrm-mcp@7.3.3

Local-first persistent memory for AI agents over MCP. Ground truths, negative learning (recorded failures block repeats), decision causality, hybrid recall, live memory streams, run-attributed fleet memory — a structured SQLite memory on your machine, no

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 160 file(s), 2.00 MB of source, external domains: 127.0.0.1, account.ghosts.lk, api.openai.com, fonts.googleapis.com, fonts.gstatic.com, ghosts.lk, github.com, registry.npmjs.org, www.cloudflarestatus.com, wyrm.ghosts.lk

Source & flagged code

9 flagged

package.jsonView file

Lines 14-55json

14 "wyrm-statusline-daemon": "dist/wyrm-statusline-daemon.js",

15 "wyrm-guard": "dist/wyrm-guard.js"

16 },

17 "files": [

18 "dist",

19 "ui",

20 "skills",

21 "scripts/preinstall.cjs",

22 "scripts/postinstall.cjs",

23 "scripts/hooks/wyrm-session-capture.mjs",

24 "scripts/hooks/wyrm-session-rehydrate.mjs",

25 "scripts/hooks/wyrm-session-prune.mjs",

26 "scripts/hooks/wyrm-tool-call-trace.mjs",

27 "README.md",

28 "BENCHMARKS.md",

29 "COMPARISON.md",

30 "LICENSE",

31 "NOTICE"

32 ],

33 "scripts": {

34 "preinstall": "node scripts/preinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L34

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L34

35 "postinstall": "node scripts/postinstall.cjs",

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L35

36 "build": "tsc && chmod +x dist/*.js && node scripts/gen-tool-manifest.mjs && node scripts/check-annotation-coverage.mjs",

37 "build:official": "npm run build && node scripts/bake-official.mjs",

38 "build:closed": "npm run build:official && node scripts/minify-dist.mjs",

39 "start": "node dist/index.js",

40 "fast": "node dist/http-fast.js",

41 "setup": "node dist/setup.js",

42 "dev": "tsc --watch",

43 "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js --config jest.config.cjs",

44 "test:watch": "npm run test -- --watch",

45 "lint": "eslint src --ext .ts",

46 "clean": "rm -rf dist",

47 "prepublishOnly": "npm run build"

48 },

49 "keywords": [

50 "mcp",

51 "ai",

52 "memory",

53 "persistent",

54 "sqlite",

55 "agent",

dist/database.jsView file

Lines 1-38javascript

1/**

2 * Wyrm Database - SQLite storage for infinite memory with data lake support

3 *

6 *

7 * Features:

8 * - Auto-discovers projects in configured directories

9 * - Handles large datasets with pagination and streaming

10 * - Write-Ahead Logging (WAL) for concurrent performance

dist/autoconfig.jsView file

Lines 649-689javascript

649 ?? process.env.CLAUDE_SETTINGS

650 ?? join(homedir(), '.claude', 'settings.json');

651}

652/** Synthetic "client" so guard install/removal renders in the setup summary. */

653function guardClient(settingsPath) {

654 return {

655

dist/wyrm-cli.jsView file

Lines 558-598javascript

558 const root = outDir ?? project.path;

559 // Zero-config harness render: with no explicit --client, render into exactly

560 // the harnesses this repo already uses (each one's native memory slot), so

561 // Wyrm becomes the compiler of every harness's memory file with no per-tool

562 // setup. An explicit --client list always wins; only the empty case detects.

563 if (clients.length === 0

dist/harvest.jsView file

Lines 1-38javascript

1/**

2 * Wyrm Harvest — auto-populate memory from artifacts you ALREADY produce.

3 *

4 * The corpus is thin because population is manual. Harvest fixes that without a

5 * daemon and without noise: it walks a project, pulls durable facts from its

6 * docs (README/CLAUDE/AGENTS/ARCHITECTURE) and recent commit subjects from

7 * `git log`, and drops them into the REVIEW QUEUE (needs_review = 1) where the

8 * operator approves or rejects. Nothing is auto-trusted.

9 *

10 * Idempotent: every candidate carries a deterministic dedup signature in its

11 * tags, so re-running harvest skips what's already there.

dist/wyrm-ui.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * 󱅝 wyrm-ui — open the Wyrm web dashboard in the operator's default browser.

4 *

5 * 1. Probes localhost:WYRM_HTTP_PORT (default 3333) for /health.

6 * 2. If a server is already up, opens the browser at /ui.

7 * 3. If nothing is running, delegates to `wyrm serve --ui` — the canonical

8 * http-fast dashboard (silver-dragon logo + /dragon-mark.svg + live data

9 * endpoints) with localhost dev-auth — which starts the server AND opens the

10 * browser itself. (Before 6.8.1 this spawned `wyrm-http`, a *different*

11 * server whose static /ui never carried the brand mark — the two-dashboard

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/preinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.preinstall = node scripts/preinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/database.jsView file

18import { join, basename, resolve, normalize } from 'path'; L19: import { spawnSync } from 'child_process'; L20: import { getResilienceManager } from './resilience.js';

High

Child Process

Package source references child process execution.

dist/database.jsView on unpkg · L18

dist/autoconfig.jsView file

669* containing a command substitution would EXECUTE on every tool call (crucible L670: * HIGH 2026-07-03). cmd.exe (Windows) does not honor single quotes, so there L671: * we wrap in double quotes and escape embedded double-quotes.

High

Shell

Package source references shell execution.

dist/autoconfig.jsView on unpkg · L669

dist/wyrm-cli.jsView file

1618} L1619: console.log(c.dim('\n Running: npm install -g wyrm-mcp@latest\n')); L1620: const r = spawnSync('npm', ['install', '-g', 'wyrm-mcp@latest'], { stdio: 'inherit', shell: false }); L1621: if (r.status === 0)

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/wyrm-cli.jsView on unpkg · L1618

578{ L579: const bridge = await import('./reverse-bridge.js'); L580: const preBrief = buildRenderPlan(deps, project, stamp);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/wyrm-cli.jsView on unpkg · L578

dist/harvest.jsView file

18*/ L19: import { execFileSync } from 'child_process'; L20: import { readFileSync, existsSync } from 'fs'; ... L103: const out = []; L104: // ── package.json → stack fact ── L105: const pkgPath = join(projectPath, 'package.json'); ... L107: try { L108: const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8')); L109: const deps = Object.keys({ ...pkg.dependencies, ...pkg.devDependencies }).slice(0, 16);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/harvest.jsView on unpkg · L18

dist/wyrm-ui.jsView file

18*/ L19: import { spawn } from 'child_process'; L20: const PORT = parseInt(process.env.WYRM_HTTP_PORT ?? '3333', 10) || 3333; L21: const HOST = '127.0.0.1'; L22: const URL_BASE = `http://${HOST}:${PORT}`; L23: async function isHttpUp() {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/wyrm-ui.jsView on unpkg · L18

Findings

5 High6 Medium7 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/database.js

HighShelldist/autoconfig.js

HighSame File Env Network Executiondist/wyrm-ui.js

HighRuntime Package Installdist/wyrm-cli.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/wyrm-cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/harvest.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

package.jsonView file

Lines 14-55json

14 "wyrm-statusline-daemon": "dist/wyrm-statusline-daemon.js",

15 "wyrm-guard": "dist/wyrm-guard.js"

16 },

17 "files": [

18 "dist",

19 "ui",

20 "skills",

21 "scripts/preinstall.cjs",

22 "scripts/postinstall.cjs",

23 "scripts/hooks/wyrm-session-capture.mjs",

24 "scripts/hooks/wyrm-session-rehydrate.mjs",

25 "scripts/hooks/wyrm-session-prune.mjs",

26 "scripts/hooks/wyrm-tool-call-trace.mjs",

27 "README.md",

28 "BENCHMARKS.md",

29 "COMPARISON.md",

30 "LICENSE",

31 "NOTICE"

32 ],

33 "scripts": {

34 "preinstall": "node scripts/preinstall.cjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L34

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L34

35 "postinstall": "node scripts/postinstall.cjs",

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L35

36 "build": "tsc && chmod +x dist/*.js && node scripts/gen-tool-manifest.mjs && node scripts/check-annotation-coverage.mjs",

37 "build:official": "npm run build && node scripts/bake-official.mjs",

38 "build:closed": "npm run build:official && node scripts/minify-dist.mjs",

39 "start": "node dist/index.js",

40 "fast": "node dist/http-fast.js",

41 "setup": "node dist/setup.js",

42 "dev": "tsc --watch",

43 "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js --config jest.config.cjs",

44 "test:watch": "npm run test -- --watch",

45 "lint": "eslint src --ext .ts",

46 "clean": "rm -rf dist",

47 "prepublishOnly": "npm run build"

48 },

49 "keywords": [

50 "mcp",

51 "ai",

52 "memory",

53 "persistent",

54 "sqlite",

55 "agent",

dist/database.jsView file

Lines 1-38javascript

1/**

2 * Wyrm Database - SQLite storage for infinite memory with data lake support

3 *

6 *

7 * Features:

8 * - Auto-discovers projects in configured directories

9 * - Handles large datasets with pagination and streaming

10 * - Write-Ahead Logging (WAL) for concurrent performance

dist/autoconfig.jsView file

Lines 649-689javascript

649 ?? process.env.CLAUDE_SETTINGS

650 ?? join(homedir(), '.claude', 'settings.json');

651}

652/** Synthetic "client" so guard install/removal renders in the setup summary. */

653function guardClient(settingsPath) {

654 return {

655

dist/wyrm-cli.jsView file

Lines 558-598javascript

558 const root = outDir ?? project.path;

559 // Zero-config harness render: with no explicit --client, render into exactly

560 // the harnesses this repo already uses (each one's native memory slot), so

561 // Wyrm becomes the compiler of every harness's memory file with no per-tool

562 // setup. An explicit --client list always wins; only the empty case detects.

563 if (clients.length === 0

dist/harvest.jsView file

Lines 1-38javascript

1/**

2 * Wyrm Harvest — auto-populate memory from artifacts you ALREADY produce.

3 *

4 * The corpus is thin because population is manual. Harvest fixes that without a

5 * daemon and without noise: it walks a project, pulls durable facts from its

6 * docs (README/CLAUDE/AGENTS/ARCHITECTURE) and recent commit subjects from

7 * `git log`, and drops them into the REVIEW QUEUE (needs_review = 1) where the

8 * operator approves or rejects. Nothing is auto-trusted.

9 *

10 * Idempotent: every candidate carries a deterministic dedup signature in its

11 * tags, so re-running harvest skips what's already there.

dist/wyrm-ui.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * 󱅝 wyrm-ui — open the Wyrm web dashboard in the operator's default browser.

4 *

5 * 1. Probes localhost:WYRM_HTTP_PORT (default 3333) for /health.

6 * 2. If a server is already up, opens the browser at /ui.

7 * 3. If nothing is running, delegates to `wyrm serve --ui` — the canonical

8 * http-fast dashboard (silver-dragon logo + /dragon-mark.svg + live data

9 * endpoints) with localhost dev-auth — which starts the server AND opens the

10 * browser itself. (Before 6.8.1 this spawned `wyrm-http`, a *different*

11 * server whose static /ui never carried the brand mark — the two-dashboard