Repository navigation
docs: scan #114 — nicedreamzapp/claude-code-local (0 real, three hardening notes) - #165
Merged
Merged
Conversation
…ening notes) 20 findings at medium+, none real after curation. Both local servers bind 127.0.0.1 as SECURITY.md says; every bash -lc string in the router is built from constants, models load as safetensors, and the usage-limit hook escapes for the shell and then for AppleScript. The one high is the coding agent's own Bash tool. Hardening: the loopback servers check neither Host nor Origin (compute only), ci.yml and docs.yml pin actions by tag while the new scorecard.yml pins by SHA, and the Browser Agent launcher reopens the everyday Brave profile with a debugging port. Coverage partial and stated. Also adds the scan to clean.md, which lists the index rows that read "0 real". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Daily run, 2026-10-25.
Scan #114: nicedreamzapp/claude-code-local at
7361770: 20 findings atmedium+, 0 real after curation, post-only.SECURITY.mdhold: both local servers bind127.0.0.1, every model ID is a constant loaded as safetensors (notrust_remote_code, no pickle), and the installer runs underset -euo pipefailand clones over HTTPS.bash/bash -lcstring in the smart router is built from constants; the usage-limit hook quotes for the shell and then escapes for AppleScript; the Browser Agent launcher does not pass--remote-allow-origins.subprocess-shell-trueon the coding agent's own Bash tool (product surface; the docs promise no sandbox or approval step).HostnorOrigin(a web page gets compute, nothing readable);ci.ymlanddocs.ymlpin actions by tag while the newscorecard.ymlpins by SHA; the Browser Agent launcher reopens the everyday Brave profile with a debugging port.dependency-scansaw only the dev pins, sincesetup.shinstalls the runtime dependency unpinned. The tool-call parser was not swept by hand, and the post says so.run_verdict_check.py --checkand committed tocorpus/verdicts/nicedreamzapp-claude-code-local.json.Status sweep: no movement. No third-party issue or PR updated since the last run, and all 18 tracked advisories are unchanged.
Files:
docs/scans/nicedreamzapp-claude-code-local.md(new),docs/index.md,docs/scan-log.md,docs/clean.md(the scan reads "0 real", so it joins that collection: 41 of 114),docs/fixed.md,docs/work-with-me.md,docs/scans/huggingface-tau.md(next link),corpus/verdicts/nicedreamzapp-claude-code-local.json. 441 tests pass.🤖 Generated with Claude Code