github JavaScript analyzed 8f76451

stdevMac/grok-in-codex

Codex plugin for delegating reviews, rescue tasks, and media generation to Grok

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8f76451 · analyzer v33 · 4w ago

dynamic code execution new Function() stdevMac-grok-in-codex-8f76451/tests/grok-parse.test.mjs :130 const embedded = new Function(`${helperSrc}; return formatStreamProgressMessage;`)();

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 40

fs stdevMac-grok-in-codex-8f76451/plugins/grok/mcp/server.mjs :3 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/grok-companion.mjs :3 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/artifacts.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/grok.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/jobs.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/media.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/process.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/review.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/sessions.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/transfer.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/workflow.mjs :1 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/artifacts.test.mjs :2 import fs from "node:fs";

show 8 more

fs (weak) stdevMac-grok-in-codex-8f76451/tests/background-finalize.test.mjs :3 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/finish-path.test.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/jobs.test.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/mcp-tools.test.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/media.test.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/render-status.test.mjs :2 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/review-post.test.mjs :4 import fs from "node:fs";
fs (weak) stdevMac-grok-in-codex-8f76451/tests/workflow.test.mjs :2 import fs from "node:fs";

shell stdevMac-grok-in-codex-8f76451/plugins/grok/mcp/server.mjs :4 import { spawn } from "node:child_process";
shell (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/grok.mjs :4 import { spawn } from "node:child_process";
shell (weak) stdevMac-grok-in-codex-8f76451/plugins/grok/scripts/lib/process.mjs :1 import { spawn, spawnSync } from "node:child_process";
shell (weak) stdevMac-grok-in-codex-8f76451/tests/background-finalize.test.mjs :2 import { spawnSync } from "node:child_process";
shell (weak) stdevMac-grok-in-codex-8f76451/tests/mcp-tools.test.mjs :3 import { spawn } from "node:child_process";