registry / zidane / 5.14.4

zidane@5.14.4

⚠ Under review

an agent that goes straight to the goal

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 79 file(s), 2.16 MB of source, external domains: 127.0.0.1, accounts.x.ai, api.arcee.ai, api.cerebras.ai, api.openai.com, api.search.brave.com, api.tavily.com, api.x.ai, api2.cursor.sh, auth.openai.com, auth.x.ai, claude.ai, cursor.com, duckduckgo.com, github.com, html.duckduckgo.com, inference.baseten.co, openrouter.ai, platform.claude.com, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

3 flagged

dist/transcript-anchors-DsoBHg43.jsView file

Lines 1-40javascript

1import { s as toolResultToText } from "./types-CyVGdbia.js";

2import { u as shell } from "./agent-Cch2ayTt.js";

3import { a as multiEdit, c as grep, i as readFile$1, l as glob, n as createSpawnTool, o as listFiles, t as writeFile$1, u as edit } from "./tools-CCd8e-HT.js";

4import { c as shortId, r as fmtTokens, s as previewLine } from "./format-BNOXpl-1.js";

5import { l as errorMessage } from "./errors-DJUxZg9b.js";

6import { joinSystemPrompt } from "./prompt.js";

7import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

8import { o as discoverSkills } from "./interpolate-BtIgcCuz.js";

9import { r as formatTokenUsage } from "./stats-DAKBEKjc.js";

10import { a as normalizeMcpServers, n as connectMcpServers } from "./mcp-Dn5W65Lv.js";

11import { n as definePreset, t as composePresets } from "./presets-BQWYMHdd.js";

12import { r as fetchUrl } from "./fetch-url-CWE8X5OD.js";

13import { webSearch } from "./tools/web-search.js";

14import { b as modelsForDescriptor, i as credentialsPath, n as resolveStorageDirs, r as applyApiKeyEnv, t as detectAuth, u as BUILTIN_PROVIDERS, w as restoreModelOptions, y as modelSupportsReasoning } from "./auth-C-ms5N2x.js";

15import { C as collectReferences, J as parseEditOutcomesFromResult, S as applyInsert, et as chatReferenceTokensFromText, u as ownerOf, w as findActiveTrigger, z as extractEditPayload } from "./turn-operations-tG0vuBNc.js";

16import { createRequire } from "node:module";

17import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";

18import { Buffer as Buffer$1 } from "node:buffer";

19import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";

20import { readdir, stat, writeFile } from "node:fs/promises";

21import { spawn } from "node:child_process";

22import { createHash } from "node:crypto";

23import { homedir, tmpdir } from "node:os";

24import { createGunzip } from "node:zlib";

25import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/transcript-anchors-DsoBHg43.jsView on unpkg · L20

26import { jsx } from "react/jsx-runtime";

27//#region \0rolldown/runtime.js

28var __require = /* @__PURE__ */ createRequire(import.meta.url);

29//#endregion

30//#region src/chat/store.ts

31function ensureStateDir(path) {

32 const dir = dirname(path);

33 if (existsSync(dir)) return;

34 try {

35 mkdirSync(dir, { recursive: true });

36 } catch (err) {

37 throw new Error(`Could not create TUI state directory at "${dir}". Override the location via \`runTui({ storageDir, prefix })\` or the \`ZIDANE_STORAGE_DIR\` env var. Original error: ${errorMessage(err)}`);

38 }

39}

40function createStateStore(path) {

dist/auth-C-ms5N2x.jsView file

Lines 1-34javascript

1import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

2import { o as ANTHROPIC_EXTRA_MODELS, s as FAST_MODE_OPTIONS, t as anthropic } from "./anthropic-RGqsJlC8.js";

3import { arcee } from "./providers/arcee.js";

4import { baseten } from "./providers/baseten.js";

Source & flagged code

3 flagged · loading source

dist/transcript-anchors-DsoBHg43.jsView file

20import { readdir, stat, writeFile } from "node:fs/promises"; L21: import { spawn } from "node:child_process"; L22: import { createHash } from "node:crypto"; L23: import { homedir, tmpdir } from "node:os"; L24: import { createGunzip } from "node:zlib"; L25: import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react"; ... L65: * doesn't take down the entire picker. Failed rows are silently skipped; L66: * a stderr line is emitted under `ZIDANE_DEBUG` for diagnosis. L67: */ ... L86: if (result.status === "fulfilled" && result.value) metas.push(result.value); L87: else if (result.status === "rejected" && process.env.ZIDANE_DEBUG) { L88: const cause = result.reason instanceof Error ? result.reason.message : String(result.reason);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/transcript-anchors-DsoBHg43.jsView on unpkg · L20

dist/auth-C-ms5N2x.jsView file

14import { homedir } from "node:os"; L15: import { createServer } from "node:http"; L16: import { getModel, getModels } from "@earendil-works/pi-ai"; ... L18: //#region src/chat/oauth-page/server.ts L19: const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1"; L20: function buildRequestHandler(opts, pending) { ... L43: res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }); L44: res.end(opts.renderPage({ L45: kind: "success", ... L121: //#region src/chat/oauth-page/anthropic.ts L122: const CLIENT_ID$1 = atob("[redacted]"); L123: const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/auth-C-ms5N2x.jsView on unpkg · L14

14Trigger-reachable chain: manifest.exports -> dist/chat.js -> dist/auth-C-ms5N2x.js L14: import { homedir } from "node:os"; L15: import { createServer } from "node:http"; L16: import { getModel, getModels } from "@earendil-works/pi-ai"; ... L18: //#region src/chat/oauth-page/server.ts L19: const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1"; L20: function buildRequestHandler(opts, pending) { ... L43: res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }); L44: res.end(opts.renderPage({ L45: kind: "success", ... L121: //#region src/chat/oauth-page/anthropic.ts L122: const CLIENT_ID$1 = atob("[redacted]"); L123: const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/auth-C-ms5N2x.jsView on unpkg · L14

Findings

2 Critical3 Medium6 Low

CriticalCredential Exfiltrationdist/auth-C-ms5N2x.js

CriticalTrigger Reachable Dangerous Capabilitydist/auth-C-ms5N2x.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/transcript-anchors-DsoBHg43.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/transcript-anchors-DsoBHg43.jsView file

Lines 1-40javascript

1import { s as toolResultToText } from "./types-CyVGdbia.js";

2import { u as shell } from "./agent-Cch2ayTt.js";

3import { a as multiEdit, c as grep, i as readFile$1, l as glob, n as createSpawnTool, o as listFiles, t as writeFile$1, u as edit } from "./tools-CCd8e-HT.js";

4import { c as shortId, r as fmtTokens, s as previewLine } from "./format-BNOXpl-1.js";

5import { l as errorMessage } from "./errors-DJUxZg9b.js";

6import { joinSystemPrompt } from "./prompt.js";

7import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

8import { o as discoverSkills } from "./interpolate-BtIgcCuz.js";

9import { r as formatTokenUsage } from "./stats-DAKBEKjc.js";

10import { a as normalizeMcpServers, n as connectMcpServers } from "./mcp-Dn5W65Lv.js";

11import { n as definePreset, t as composePresets } from "./presets-BQWYMHdd.js";

12import { r as fetchUrl } from "./fetch-url-CWE8X5OD.js";

13import { webSearch } from "./tools/web-search.js";

16import { createRequire } from "node:module";

17import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";

18import { Buffer as Buffer$1 } from "node:buffer";

19import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";

20import { readdir, stat, writeFile } from "node:fs/promises";

21import { spawn } from "node:child_process";

22import { createHash } from "node:crypto";

23import { homedir, tmpdir } from "node:os";

24import { createGunzip } from "node:zlib";

25import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/transcript-anchors-DsoBHg43.jsView on unpkg · L20

26import { jsx } from "react/jsx-runtime";

27//#region \0rolldown/runtime.js

28var __require = /* @__PURE__ */ createRequire(import.meta.url);

29//#endregion

30//#region src/chat/store.ts

31function ensureStateDir(path) {

32 const dir = dirname(path);

33 if (existsSync(dir)) return;

34 try {

35 mkdirSync(dir, { recursive: true });

36 } catch (err) {

38 }

39}

40function createStateStore(path) {

dist/auth-C-ms5N2x.jsView file

Lines 1-34javascript

1import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

2import { o as ANTHROPIC_EXTRA_MODELS, s as FAST_MODE_OPTIONS, t as anthropic } from "./anthropic-RGqsJlC8.js";

3import { arcee } from "./providers/arcee.js";

4import { baseten } from "./providers/baseten.js";