Safety notes
Verified with notes
Compact tool-call rendering, diff visualization, and output truncation.
Compact tool-call rendering, diff visualization, and output truncation.
Static scan findings
This is a first-pass static screen, not a formal audit. It flags patterns worth reading before install.
MEDIUM · token_access
package-lock.json
"@aws-sdk/token-providers": "3.1036.0","@aws-sdk/token-providers": "3.1036.0",
MEDIUM · token_access
tests/diff-renderer-width.test.ts
.map((token) => Number.parseInt(token, 10))
MEDIUM · token_access
src/render-utils.ts
.map((token) => Number.parseInt(token, 10))
MEDIUM · token_access
src/user-message-box-utils.ts
.map((token) => Number.parseInt(token, 10))
MEDIUM · spawn_shell
src/diff-renderer.ts
while ((match = pattern.exec(input)) !== null) {
MEDIUM · token_access
src/diff-renderer.ts
.map((token) => Number.parseInt(token, 10))function tokenizeInlineDiff(input: string): Array<{ value: string; start: number; end: number }> {const tokens: Array<{ value: string; start: number; end: number }> = [];
Package scripts captured
package.json
{
"build": "npx --yes -p typescript@5.7.3 tsc -p tsconfig.json --noCheck",
"lint": "npm run build",
"test": "npx --yes tsx --test tests/*.test.ts",
"check": "npm run lint && npm run test"
}