registry / zcode-starterkit / 1.7.18

zcode-starterkit@1.7.18

Global baseline (ZCode plugins) + thin project overlay installer for ZCode Agent.

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 988 KB of source, external domains: api.github.com, context7.com, github.com, grep.app, json-schema.org, json.schemastore.org, prompts.chat, raw.githubusercontent.com, spec.openapis.org, stackoverflow.com, token.v-claw.org, tools.ietf.org, www.safaribooksonline.com, www.w3.org

Source & flagged code

8 flagged

baseline/hooks-plugin/hooks/rtk.mjsView file

Lines 2-42javascript

2// rtk hook — ported from opencode-starterkit baseline/plugin/rtk.ts.

3// ZCode hook event: PreToolUse (rewrite bash/shell command for token savings).

4//

5// Requires: rtk >= 0.23.0 in PATH. If rtk is missing, the hook is a no-op.

6// Reads JSON stdin, emits JSON stdout with hookSpecificOutput.updatedInput

7// (ZCode v3.3+ PreToolUse protocol) when rtk rewrites.

8// Plain JS (no TypeScript) so Node runs it directly.

9//

10// Implementation note (v1.7.4): rtk rewrite exits with status 3 when the

11// rewrite is successful but the original output is partial/incomplete

12// (e.g. rewriting `rg`/`grep` — the proxy itself doesn't fully parse the

13// output before returning). We use spawnSync (not execSync) and accept

14// status 0 OR 3 as "rewrite happened" so rg/grep compressions are not lost.

15//

16// Local expansions (beyond bare rtk rewrite):

17// - npm/pnpm test → npm/pnpm run test (forms rtk rewrite understands)

18// - node --test / yarn test / bun test → rtk test -- <cmd> fallback

20import fs from 'node:fs'

21import path from 'node:path'

22import { fileURLToPath, pathToFileURL } from 'node:url'

23import { spawnSync } from 'node:child_process'

High

Child Process

Package source references child process execution.

baseline/hooks-plugin/hooks/rtk.mjsView on unpkg · L22

25// Statuses the rtk proxy returns when a rewrite is applied. Exit 0 is the

26// normal happy path; exit 3 means the proxy emitted a partial rewrite

27// (common for grep/rg compression). Any other status is treated as no-op.

28const REWRITE_STATUSES = new Set([0, 3])

30// Idempotency guard: if the command already routes through rtk, skip.

31// Same regex as the opencode donor (handles env-var prefixes too).

32const IDEMPOTENT_RE = /^\s*(?:RTK_[A-Z_]+=\S+\s+)*rtk\b/

34// Match a shell tool. ZCode hook protocol uses lowercase tool_name; the

35// matcher in hooks.json normalizes the casing for us, but be lenient.

36const SHELL_TOOLS = new Set(['bash', 'shell', 'execute_bash', 'run_command', 'terminal'])

37const RUNTIME_CONFIG_PATH = path.join(path.dirname(fileURLToPath(import.meta.url)), 'rtk.json')

39// Leading env assignments (FOO=1 BAR=baz npm test). Keep them attached so

40// rewrite still sees the real command after the env prefix.

41const LEADING_ENV_RE = /^((?:[A-Za-z_][A-Za-z0-9_]*=\S+\s+)*)/

src/rtk.mjsView file

Lines 1-33javascript

1// rtk installer/detector/state — ported from opencode-starterkit src/rtk.mjs.

2// Auto-installs the rtk binary if missing, detects it across PATH +

3// common global bin dirs, records integration state in the shared

4// starterkit-state.json, and exposes a resolveRtkSetup pipeline that

5// mirrors resolveCodebaseMemorySetup / resolveWebclawSetup.

6//

7// All platforms (win32, linux, darwin) auto-download the correct

8// release binary from GitHub. The old Unix-only install.sh path is

9// kept as a fallback for edge cases.

baseline/mcp-tools/dist/mcp/server.jsView file

2941sourceCode = this.opts.code.process(sourceCode, sch); L2942: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2943: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

baseline/mcp-tools/dist/mcp/server.jsView on unpkg · L2941

baseline/hooks-plugin/hooks/sqlite-open.mjsView file

Lines 1-24javascript

1// Shared SQLite open + FTS schema helpers for hooks.

2//

3// Backend priority:

4// 1. better-sqlite3 (FTS5 on all platforms) — resolved from:

5// - require('better-sqlite3') if installed next to hooks

6// - sibling mcp-tools plugin cache (packaged with native module)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

baseline/hooks-plugin/hooks/sqlite-open.mjsView on unpkg · L4

7// 2. node:sqlite (Node 22+) — may lack fts5 on Windows

8//

src/plugin-packager.mjsView file

Lines 1-22javascript

1import fs from 'node:fs'

2import path from 'node:path'

3import { spawnSync } from 'node:child_process'

4import {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

src/plugin-packager.mjsView on unpkg · L2

baseline/hooks-plugin/hooks/guard.cmdView file

•path = baseline/hooks-plugin/hooks/guard.cmd kind = build_helper sizeBytes = 207 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

baseline/hooks-plugin/hooks/guard.cmdView on unpkg

baseline/skills/security-and-hardening/SKILL.mdView file

Lines 84-124markdown

84import bcrypt from "bcrypt";

85const hash = await bcrypt.hash(password, 12); // cost factor 12

86const valid = await bcrypt.compare(input, hash);

88// ✅ Session management

89const session = {

90 httpOnly: true, // No JS access

91 secure: true, // HTTPS only

92 sameSite: "lax", // CSRF protection

93 maxAge: 3600, // 1 hour expiry

94};

Source & flagged code

8 flagged · loading source

baseline/hooks-plugin/hooks/rtk.mjs

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code