phnx-labs/agents-cli

filesystem 400

• fs phnx-labs-agi-cli-9006de7/.agents/artifacts/2026-08-07/analyze-verify-work-complete.ts :4 import { existsSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
• fs (weak) phnx-labs-agi-cli-9006de7/.github/workflows/ci.test.ts :10 import { readFileSync } from 'node:fs';
• fs (weak) phnx-labs-agi-cli-9006de7/.github/workflows/computer-helper-win.test.ts :20 import * as fs from 'fs';
• fs (weak) phnx-labs-agi-cli-9006de7/.github/workflows/tests-gate.test.ts :8 import { readFileSync } from 'node:fs';
• fs phnx-labs-agi-cli-9006de7/cli/bench/sessions-active-perf.ts :75 import * as fs from 'fs';
• fs phnx-labs-agi-cli-9006de7/cli/bench/sessions-perf.ts :24 import * as fs from 'fs';
• fs (weak) phnx-labs-agi-cli-9006de7/cli/scripts/backfill-changelog.ts :10 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
• fs (weak) phnx-labs-agi-cli-9006de7/cli/scripts/bench-staleness.ts :11 import * as fs from 'fs';
• fs (weak) phnx-labs-agi-cli-9006de7/cli/scripts/bound-repo-root.test.ts :3 import * as fs from 'fs';
• fs (weak) phnx-labs-agi-cli-9006de7/cli/scripts/create-annotated-release-tag.test.ts :12 import * as fs from 'fs';
• fs (weak) phnx-labs-agi-cli-9006de7/cli/scripts/gen-changelog.test.ts :1 import { readFileSync } from 'node:fs';
• fs (weak) phnx-labs-agi-cli-9006de7/cli/scripts/gen-changelog.ts :21 import { readFileSync, readdirSync, statSync, writeFileSync } from 'node:fs';

360 more not shown — this panel samples each group; the count above is the real total.

shell / exec 361

• shell phnx-labs-agi-cli-9006de7/.agents/artifacts/2026-08-07/analyze-verify-work-complete.ts :7 import { spawnSync } from 'node:child_process';
• shell phnx-labs-agi-cli-9006de7/.agents/artifacts/2026-08-25/mine-teams-sessions.ts :53 const proc = Bun.spawnSync(argv, { stdout: "pipe", stderr: "pipe", timeout });
• shell (weak) phnx-labs-agi-cli-9006de7/.github/workflows/artifact-layout.test.ts :21 import { execFileSync } from 'node:child_process';
• shell phnx-labs-agi-cli-9006de7/cli/bench/sessions-active-perf.ts :57 * `process.env.PATH` at runtime does not reach a later `spawnSync('ssh', ...)`
• shell phnx-labs-agi-cli-9006de7/cli/bench/sessions-perf.ts :23 import { spawnSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/bench-ssh.mjs :23 import { execSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/bound-repo-root.test.ts :2 import { execFileSync, execSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/create-annotated-release-tag.test.ts :11 import { spawnSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/install-helper.js :17 import { spawnSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/install.test.ts :2 import { spawnSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/postinstall.js :10 import { spawnSync } from 'child_process';
• shell (weak) phnx-labs-agi-cli-9006de7/cli/scripts/postinstall.test.ts :2 import { spawnSync } from 'child_process';

321 more not shown — this panel samples each group; the count above is the real total.

network 66

• net phnx-labs-agi-cli-9006de7/cli/src/bootstrap.ts :345 const response = await fetch(`https://unpkg.com/@phnx-labs/agents-cli@${toVersion}/CHANGELOG.md`);
• net (weak) phnx-labs-agi-cli-9006de7/cli/src/commands/auth.test.ts :5 import * as http from 'http';
• net phnx-labs-agi-cli-9006de7/cli/src/commands/factory.ts :50 const res = await fetch(`${factoryUrl}/factory/submit`, {
• net phnx-labs-agi-cli-9006de7/cli/src/commands/share.ts :145 const res = await fetch(url, { headers: { accept: 'application/json' } });
• net phnx-labs-agi-cli-9006de7/cli/src/commands/webhook.ts :9 import type { Server } from 'http';
• net (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/accounting/usage.test.ts :880 // Driven through a real provider fetch (Kimi) with a credential file that
• net phnx-labs-agi-cli-9006de7/cli/src/lib/accounting/usage.ts :466 return source ? source.fetch(options) : { snapshot: null, error: null };
• net (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/auth-health.test.ts :326 describe('probeAuthHealth derives live from a fresh usage fetch (RUSH-3036)', () => {
• net phnx-labs-agi-cli-9006de7/cli/src/lib/auto-pull-worker.ts :92 await git.fetch('origin');
• net phnx-labs-agi-cli-9006de7/cli/src/lib/browser/cdp.ts :247 response = await fetch(`http://${host}:${port}/json/version`, { signal: controller.signal });
• net (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/browser/chrome.test.ts :4 import * as net from 'net';
• net (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/browser/drivers/local.test.ts :2 import * as net from 'net';

26 more not shown — this panel samples each group; the count above is the real total.

secrets 30

• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/commands/accounts.test.ts :259 tok: process.env.CLAUDE_CODE_OAUTH_TOKEN,
• secrets phnx-labs-agi-cli-9006de7/cli/src/commands/exec.ts :1444 let hasKey = !!process.env.CRABBOX_TAILSCALE_AUTH_KEY;
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/commands/sessions-r2-backup.test.ts :141 const SECRET = process.env.AGENTS_TEST_R2_SECRET_ACCESS_KEY ?? '';
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/commands/share.test.ts :86 previousShareWriteToken = process.env.SHARE_WRITE_TOKEN;
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/commands/teams.cloud-dispatch.test.ts :5 const originalToken = process.env.SHARE_WRITE_TOKEN;
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/commands/testdata/session-resolver-ssh-peer.mjs :52 const hostKey = fs.readFileSync(process.env.SRP_HOST_KEY);
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/__tests__/runner.test.ts :462 const prev = process.env.CLAUDE_CODE_OAUTH_TOKEN;
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/accounting/usage.test.ts :1122 prevMetaKey = process.env.META_API_KEY;
• secrets phnx-labs-agi-cli-9006de7/cli/src/lib/accounting/usage.ts :2757 const envKey = process.env.META_API_KEY?.trim() || process.env.MODEL_API_KEY?.trim();
• secrets phnx-labs-agi-cli-9006de7/cli/src/lib/agent-spec/agents.ts :2482 if (process.env.META_API_KEY?.trim() || process.env.MODEL_API_KEY?.trim()) {
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/claude-account-token.test.ts :32 prevClaudeToken = process.env.CLAUDE_CODE_OAUTH_TOKEN;
• secrets (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/cloud/antigravity.test.ts :69 const prev = process.env.GEMINI_API_KEY;

install hooks 4

• prepare phnx-labs-agi-cli-9006de7/cli/package.json :48 npm run build
• prepack phnx-labs-agi-cli-9006de7/cli/package.json :49 cp ../README.md README.md
• postinstall phnx-labs-agi-cli-9006de7/cli/package.json :50 node scripts/postinstall.js
• postinstall phnx-labs-agi-cli-9006de7/packages/swarmify-mirror/package.json :13 node scripts/postinstall.js

declared dependencies 32

• @homebridge/node-pty-prebuilt-multiarch@0.13.1
• @inquirer/prompts@8.5.2
• @types/proper-lockfile@4.1.4
• @xterm/headless@6.0.0
• @zed-industries/agent-client-protocol@0.4.5
• acorn@8.18.0
• age-encryption@0.3.0
• aws4fetch@1.0.20
• chalk@5.6.2
• commander@15.0.0
• croner@10.0.1
• diff@9.0.0

clipboard 2

• clipboard shell call phnx-labs-agi-cli-9006de7/cli/src/commands/secrets.ts :3150 ? [['pbcopy', []]]
• clipboard shell call phnx-labs-agi-cli-9006de7/cli/src/commands/sessions-browser.ts :309 ? [['pbcopy', [] as string[]]]

obfuscation 4

• dynamic require()/import() phnx-labs-agi-cli-9006de7/cli/src/lib/__tests__/manifest.test.ts :26 const { readManifest, writeManifest } = await import(${JSON.stringify(manifestPath)});
• dynamic require()/import() phnx-labs-agi-cli-9006de7/cli/src/lib/__tests__/state.test.ts :210 const { updateMeta } = await import(${JSON.stringify(modulePath)});
• dynamic require()/import() phnx-labs-agi-cli-9006de7/cli/src/lib/hooks/install.test.ts :54 const mod = await import(${JSON.stringify(modulePath)});
• dynamic require()/import() phnx-labs-agi-cli-9006de7/cli/src/lib/resource-inventory.test.ts :52 const { getVersionHomePath } = await import(${JSON.stringify(versionsPath)});

perm:untrusted 1

• untrusted (weak) phnx-labs-agi-cli-9006de7/cli/src/lib/index.bench.ts :40 * fetch (`fetch(...).then(...)`, never awaited by the caller) and the latter is