registry / zidane / 6.1.0

zidane@6.1.0

⚠ Under review

an agent that goes straight to the goal

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 80 file(s), 2.56 MB of source, external domains: 127.0.0.1, accounts.x.ai, api.arcee.ai, api.cerebras.ai, api.openai.com, api.search.brave.com, api.tavily.com, api.x.ai, api2.cursor.sh, auth.openai.com, auth.x.ai, claude.ai, codeload.github.com, cursor.com, duckduckgo.com, github.com, html.duckduckgo.com, inference.baseten.co, mcp.example.com, openrouter.ai, platform.claude.com, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

3 flagged

dist/transcript-anchors-BTNe1OJi.jsView file

Lines 1-39javascript

1import { l as toolResultToText } from "./types-BIarq1qE.js";

2import { At as grep, Ct as readFile$1, Jt as resolveExtensionKeybindings, Mt as edit, Ot as listFiles, Pt as resolveStorageDirs, R as EMPTY_EXTENSION_REGISTRY, Wt as mergeKeybindings, Z as buildExtensionPreset, ft as waitTask, jt as glob, mt as createSpawnTool, ot as composePresets, qt as readKeybindingsRaw, st as definePreset, ut as writeFile$1, wt as multiEdit, xt as shell, yt as shellKill } from "./agent-DZRA7wip.js";

3import { c as previewLine, i as fmtTokens, l as shortId } from "./format-BF745pLL.js";

4import { l as errorMessage } from "./errors-DJUxZg9b.js";

5import { M as findGitRoot$1, i as discoverSkills, j as projectUserPaths } from "./resolve-CC8Lmwcj.js";

6import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

7import { r as formatTokenUsage } from "./stats-DAKBEKjc.js";

8import { joinSystemPrompt } from "./prompt.js";

9import { a as normalizeMcpServers, n as connectMcpServers } from "./mcp-CcvuVXB9.js";

10import { i as findActiveTriggers, n as collectReferences, o as mergeSuggestions, t as applyInsert } from "./completion-core-CXYSVhZo.js";

11import { r as fetchUrl } from "./fetch-url-_5WKWpbQ.js";

12import { webSearch } from "./tools/web-search.js";

13import { C as restoreModelOptions, l as BUILTIN_PROVIDERS, n as applyApiKeyEnv, r as credentialsPath, t as detectAuth, v as modelSupportsReasoning, y as modelsForDescriptor } from "./auth-B3cB5K6d.js";

14import { H as extractEditPayload, Z as parseEditOutcomesFromResult, p as ownerOf, rt as chatReferenceTokensFromText, u as capTranscriptEvents } from "./turn-operations-CEt_l3fy.js";

15import { createRequire } from "node:module";

16import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";

17import { Buffer as Buffer$1 } from "node:buffer";

18import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";

19import { readdir, stat, writeFile } from "node:fs/promises";

20import { spawn } from "node:child_process";

21import { homedir, tmpdir } from "node:os";

22import { createHash } from "node:crypto";

23import { createGunzip } from "node:zlib";

24import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/transcript-anchors-BTNe1OJi.jsView on unpkg · L19

25import { jsx } from "react/jsx-runtime";

26//#region \0rolldown/runtime.js

27var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();

28//#endregion

29//#region src/chat/store.ts

30function ensureStateDir(path) {

31 const dir = dirname(path);

32 if (existsSync(dir)) return;

33 try {

34 mkdirSync(dir, { recursive: true });

35 } catch (err) {

36 throw new Error(`Could not create TUI state directory at "${dir}". Override the location via \`runTui({ storageDir, prefix })\` or the \`ZIDANE_STORAGE_DIR\` env var. Original error: ${errorMessage(err)}`);

37 }

38}

39function createStateStore(path) {

dist/auth-B3cB5K6d.jsView file

Lines 1-34javascript

1import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

2import { c as ANTHROPIC_EXTRA_MODELS, l as FAST_MODE_OPTIONS, t as anthropic } from "./anthropic-DNJbRMUK.js";

3import { arcee } from "./providers/arcee.js";

4import { baseten } from "./providers/baseten.js";

Source & flagged code

3 flagged · loading source

dist/transcript-anchors-BTNe1OJi.jsView file

19import { readdir, stat, writeFile } from "node:fs/promises"; L20: import { spawn } from "node:child_process"; L21: import { homedir, tmpdir } from "node:os"; L22: import { createHash } from "node:crypto"; L23: import { createGunzip } from "node:zlib"; L24: import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react"; ... L64: * doesn't take down the entire picker. Failed rows are silently skipped; L65: * a stderr line is emitted under `ZIDANE_DEBUG` for diagnosis. L66: */ ... L78: } catch (err) { L79: if (process.env.ZIDANE_DEBUG) { L80: const cause = err instanceof Error ? err.message : String(err);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/transcript-anchors-BTNe1OJi.jsView on unpkg · L19

dist/auth-B3cB5K6d.jsView file

14import { randomBytes } from "node:crypto"; L15: import { createServer } from "node:http"; L16: import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all"; ... L18: //#region src/chat/oauth-page/server.ts L19: const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1"; L20: function buildRequestHandler(opts, pending) { ... L43: res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }); L44: res.end(opts.renderPage({ L45: kind: "success", ... L121: //#region src/chat/oauth-page/anthropic.ts L122: const CLIENT_ID$1 = atob("[redacted]"); L123: const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/auth-B3cB5K6d.jsView on unpkg · L14

14Trigger-reachable chain: manifest.exports -> dist/chat.js -> dist/auth-B3cB5K6d.js L14: import { randomBytes } from "node:crypto"; L15: import { createServer } from "node:http"; L16: import { getBuiltinModel, getBuiltinModels } from "@earendil-works/pi-ai/providers/all"; ... L18: //#region src/chat/oauth-page/server.ts L19: const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1"; L20: function buildRequestHandler(opts, pending) { ... L43: res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" }); L44: res.end(opts.renderPage({ L45: kind: "success", ... L121: //#region src/chat/oauth-page/anthropic.ts L122: const CLIENT_ID$1 = atob("[redacted]"); L123: const AUTHORIZE_URL$1 = "https://claude.ai/oauth/authorize";

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/auth-B3cB5K6d.jsView on unpkg · L14

Findings

2 Critical3 Medium6 Low

CriticalCredential Exfiltrationdist/auth-B3cB5K6d.js

CriticalTrigger Reachable Dangerous Capabilitydist/auth-B3cB5K6d.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/transcript-anchors-BTNe1OJi.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/transcript-anchors-BTNe1OJi.jsView file

Lines 1-39javascript

1import { l as toolResultToText } from "./types-BIarq1qE.js";

3import { c as previewLine, i as fmtTokens, l as shortId } from "./format-BF745pLL.js";

4import { l as errorMessage } from "./errors-DJUxZg9b.js";

5import { M as findGitRoot$1, i as discoverSkills, j as projectUserPaths } from "./resolve-CC8Lmwcj.js";

6import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

7import { r as formatTokenUsage } from "./stats-DAKBEKjc.js";

8import { joinSystemPrompt } from "./prompt.js";

9import { a as normalizeMcpServers, n as connectMcpServers } from "./mcp-CcvuVXB9.js";

10import { i as findActiveTriggers, n as collectReferences, o as mergeSuggestions, t as applyInsert } from "./completion-core-CXYSVhZo.js";

11import { r as fetchUrl } from "./fetch-url-_5WKWpbQ.js";

12import { webSearch } from "./tools/web-search.js";

14import { H as extractEditPayload, Z as parseEditOutcomesFromResult, p as ownerOf, rt as chatReferenceTokensFromText, u as capTranscriptEvents } from "./turn-operations-CEt_l3fy.js";

15import { createRequire } from "node:module";

16import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";

17import { Buffer as Buffer$1 } from "node:buffer";

18import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";

19import { readdir, stat, writeFile } from "node:fs/promises";

20import { spawn } from "node:child_process";

21import { homedir, tmpdir } from "node:os";

22import { createHash } from "node:crypto";

23import { createGunzip } from "node:zlib";

24import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/transcript-anchors-BTNe1OJi.jsView on unpkg · L19

25import { jsx } from "react/jsx-runtime";

26//#region \0rolldown/runtime.js

27var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();

28//#endregion

29//#region src/chat/store.ts

30function ensureStateDir(path) {

31 const dir = dirname(path);

32 if (existsSync(dir)) return;

33 try {

34 mkdirSync(dir, { recursive: true });

35 } catch (err) {

37 }

38}

39function createStateStore(path) {

dist/auth-B3cB5K6d.jsView file

Lines 1-34javascript

1import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";

2import { c as ANTHROPIC_EXTRA_MODELS, l as FAST_MODE_OPTIONS, t as anthropic } from "./anthropic-DNJbRMUK.js";

3import { arcee } from "./providers/arcee.js";

4import { baseten } from "./providers/baseten.js";