murmur-cli 0.8.0
A build script was added since 0.7.0.
47
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 10 | build_script_added diff · murmur-cli | A build script was added since 0.7.0. | |
| 10 | new_high_finding diff · murmur-cli | tests/egress_namespace_probe.rs:441 | New since 0.7.0: yara:reverse_shell |
| 10 | static:process_spawn static · murmur-cli | build.rs:59 | medium severity process_spawn in build_script code (119 places): std::process::Command::new |
| 10 | static:yara:reverse_shell static · murmur-cli | tests/egress_namespace_probe.rs:441 | high severity yara:reverse_shell in test code (4 places): Reverse shell idioms |
| 2 | static:credential_access static · murmur-cli | tests/deploy_cmd.rs:83 | medium severity credential_access in test code (3 places): id_ed25519 |
| 2 | static:secret_environment_variable static · murmur-cli | src/commands/deploy.rs:591 | medium severity secret_environment_variable in library code (88 places): GITHUB_TOKEN |
| 2 | static:shell_command static · murmur-cli | src/commands/deploy.rs:1425 | medium severity shell_command in library code (12 places): mkdir -p /usr/local/bin && mv /tmp/mur-upload /usr/local/bin/mur && chmod +x /usr/local/bin/mur |
| 1 | static:build_script static · murmur-cli | build.rs | low severity build_script in build_script code: build.rs |
Behavior
New since the previous version
static:process_spawn
Profile
static:credential_access static:process_spawn static:secret_environment_variable static:shell_command static:yara:reverse_shell
Static findings
18 groups
high yara_match reverse_shell test 4
medium secret_environment_variable library 44
GITHUB_TOKENsrc/commands/deploy.rs:591 src/default_versions.rs:496 src/source/github.rs:311 src/source/mod.rs:2027GH_TOKENsrc/commands/deploy.rs:592OPENAI_API_KEY=sk-xxxsrc/commands/deploy.rs:2578ANTHROPIC_API_KEYsrc/commands/new.rs:801 src/commands/new.rs:869 src/commands/new.rs:874 src/commands/new.rs:900 src/commands/new.rs:901 src/commands/new.rs:976 src/commands/new.rs:980 src/commands/new.rs:990 src/commands/new.rs:991 src/commands/new.rs:1008 src/commands/new.rs:1011 src/commands/new.rs:1022 src/commands/new.rs:1023 src/commands/new.rs:1040 src/commands/new.rs:1043 src/commands/new.rs:1062 src/commands/new.rs:1063 src/commands/new.rs:1396 src/commands/new_roster.rs:50OPENAI_API_KEYsrc/commands/new.rs:805 src/commands/new.rs:870 src/commands/new.rs:877 src/commands/new.rs:904 src/commands/new.rs:905 src/commands/new.rs:977 src/commands/new.rs:983 src/commands/new.rs:994 src/commands/new.rs:995 src/commands/new.rs:1009 src/commands/new.rs:1013 src/commands/new.rs:1026 src/commands/new.rs:1027 src/commands/new.rs:1041 src/commands/new.rs:1044 src/commands/new.rs:1066 src/commands/new.rs:1067 src/commands/new.rs:1401 src/commands/new_roster.rs:58
medium secret_environment_variable test 44
GITHUB_TOKENtests/agent_pull.rs:113 tests/deploy_cmd.rs:576 tests/env_allow_stripped.rs:39 tests/env_allow_stripped.rs:59 tests/env_allow_stripped.rs:62 tests/env_allow_stripped.rs:179 tests/env_allow_stripped.rs:215 tests/env_allow_stripped.rs:222 tests/github_asset_platform.rs:62 tests/github_rate_limit.rs:191 tests/github_rate_limit.rs:192 tests/github_rate_limit.rs:262 tests/github_rate_limit.rs:363 tests/github_rate_limit.rs:402 tests/github_rate_limit.rs:458 tests/install_default_source.rs:35 tests/install_platform.rs:202 tests/new_roster.rs:1429 tests/new_roster.rs:1505 tests/process_runner.rs:1127 tests/process_runner.rs:1138 tests/run.rs:386 tests/run.rs:400 tests/run.rs:429 tests/scoped_names.rs:66 tests/source_resolution.rs:37 tests/wit_level.rs:43NPM_TOKENtests/env_allow_stripped.rs:140 tests/env_allow_stripped.rs:140ANTHROPIC_API_KEYtests/new_roster.rs:79 tests/new_roster.rs:258 tests/new_roster.rs:1137 tests/new_roster.rs:1181 tests/new_roster.rs:1187 tests/new_roster.rs:1226 tests/process_runner.rs:1125 tests/process_runner.rs:1138OPENAI_API_KEYtests/new_roster.rs:80 tests/new_roster.rs:1212 tests/new_roster.rs:1759 tests/process_runner.rs:1126 tests/process_runner.rs:1138GITHUB_TOKEN=absenttests/run.rs:389 tests/run.rs:410
medium shell_command test 7
bash -c 'echo still failing; exit 3'tests/done_check.rs:35bash -c 'if [ -f .dc-ran ]; then echo green; exit 0; fi; : > .dc-ran; echo "1 test failed: test_parse"; exit 1'tests/done_check.rs:38bash -c 'echo $$ > check.pid; exec sleep 600'tests/done_check.rs:561bash -c 'echo started; sleep 30'tests/done_check.rs:627bash -c ': > dc-started; exec sleep 600'tests/done_check.rs:850bash -c 'echo HOME=$HOME; echo y > {}'tests/done_check.rs:940bash -c ': > {mine}; while [ ! -e {theirs} ] && [ $SECONDS -lt 20 ]; do :; done; [ -e {theirs} ] && printf {output} || printf alone'tests/plan_tool.rs:338
medium shell_command library 5
mkdir -p /usr/local/bin && mv /tmp/mur-upload /usr/local/bin/mur && chmod +x /usr/local/bin/mursrc/commands/deploy.rs:1425printf '%s' '{encoded}' | base64 -d > {remote_deploy_dir}/.env && chmod 600 {remote_deploy_dir}/.envsrc/commands/deploy.rs:1699[mur doctor] warning[{E_RUN_019}]: this capsule declares capabilities.spawn.allow, and {ROOST_BINARY} was not found on PATH.\u{a} `mur run` refuses a capsule that cannot register with the daemon that…src/commands/doctor.rs:817{"event_type":"done_check","event_id":"evt_d1","parent_id":"evt_2","session_id":"s","timestamp":7,"task_id":"tsk_1","number":1,"command":"bash -c 'exit 3'","outcome":"failed","exit_code":3,"duration_m…src/commands/trace.rs:7257{"event_type":"done_check","event_id":"evt_d2","parent_id":"evt_2","session_id":"s","timestamp":8,"task_id":"tsk_1","number":2,"command":"bash -c 'sleep 9'","outcome":"timed_out","exit_code":null,"dur…src/commands/trace.rs:7258
medium credential_access test 3
id_ed25519tests/deploy_cmd.rs:83deploy_keys/dep_x/id_ed25519tests/doctor_cmd.rs:2070 tests/doctor_cmd.rs:2138
medium process_spawn build_script 1
std::process::Command::newbuild.rs:59
low network_access test 134
std::net::TcpStream::connecttests/a2a.rs:144 tests/a2a_v1_tasks.rs:734 tests/busy_door.rs:365 tests/cancel.rs:267 tests/cancel.rs:504 tests/cancel.rs:763 tests/common/door_capsule.rs:424 tests/common/idle_capsule.rs:243 tests/common/idle_capsule.rs:324 tests/common/stream.rs:286 tests/completion_lane.rs:173 tests/control_surface.rs:416 tests/delegation.rs:314 tests/delegation.rs:1304 tests/delegation.rs:1320 tests/deploy_precompile.rs:249 tests/done_check.rs:752 tests/door_discovery.rs:95 tests/door_discovery.rs:120 tests/door_discovery.rs:138 tests/formation_launch.rs:753 tests/identity.rs:509 tests/identity.rs:537 tests/input_required.rs:223 tests/input_required.rs:399 tests/json_launch.rs:144 tests/json_launch.rs:756 tests/keep_working.rs:592 tests/lifecycle.rs:165 tests/lifecycle.rs:1601 tests/peer_handoff.rs:74 tests/peer_handoff.rs:125 tests/peer_tasks.rs:249 tests/peer_tasks.rs:423 tests/process_a2a_parity.rs:624 tests/process_a2a_parity.rs:694 tests/process_cancel.rs:335 tests/process_cancel.rs:363 tests/process_cancel.rs:449 tests/process_sessions.rs:496 tests/process_sessions.rs:639 tests/process_subscription_e2e.rs:455 tests/process_subscription_e2e.rs:839 tests/ps_stop.rs:352 tests/ps_stop.rs:2073 tests/reopen_stream.rs:230 tests/resource_plane.rs:63 tests/resource_plane.rs:117 tests/running_address.rs:345 tests/running_address.rs:374 and 8 morestd::net::TcpStreamtests/busy_door.rs:281 tests/busy_door.rs:362 tests/busy_door.rs:383 tests/busy_door.rs:388 tests/common/github_release.rs:279 tests/common/idle_capsule.rs:225 tests/common/idle_capsule.rs:255 tests/common/idle_capsule.rs:260 tests/common/idle_capsule.rs:270 tests/common/idle_capsule.rs:303 tests/common/mod.rs:1092 tests/common/recording_upstream.rs:123 tests/common/stream.rs:326 tests/common/wire_recorder.rs:145 tests/common/wire_recorder.rs:167 tests/delegation.rs:274 tests/delegation.rs:334 tests/formation_retention.rs:86 tests/github_rate_limit.rs:126 tests/inference_credential_rotation.rs:154 tests/inference_gateway.rs:101 tests/inference_gateway.rs:129 tests/inference_retry.rs:136 tests/inference_retry.rs:154 tests/input_required.rs:342 tests/input_required.rs:375 tests/input_required.rs:384 tests/input_required.rs:413 tests/input_required.rs:440 tests/peer_handoff.rs:225 tests/process_cancel.rs:443 tests/process_subscription_e2e.rs:866 tests/process_subscription_e2e.rs:886 tests/reopen_stream.rs:211 tests/reopen_stream.rs:240 tests/streaming_protocol_doc.rs:250 tests/streaming_protocol_doc.rs:261 tests/streaming_protocol_doc.rs:562 tests/topology_cmd.rs:75std::net::TcpStream::connect_timeouttests/busy_door.rs:284std::net::TcpListener::bindtests/common/github_release.rs:66 tests/common/mod.rs:176 tests/common/mod.rs:972 tests/common/recording_upstream.rs:79 tests/completion_lane.rs:366 tests/credential_gateway.rs:68 tests/delegation.rs:176 tests/delegation.rs:186 tests/delegation.rs:443 tests/delegation.rs:476 tests/deploy_cmd.rs:561 tests/doctor_cmd.rs:71 tests/egress_namespace_probe.rs:427 tests/formation_retention.rs:51 tests/github_rate_limit.rs:104 tests/inference_credential_rotation.rs:87 tests/inference_gateway.rs:69 tests/inference_retry.rs:95 tests/input_required.rs:1208 tests/install_default_source.rs:85 tests/native_tool_confinement.rs:370 tests/new_roster.rs:1470 tests/peer_handoff.rs:155 tests/ps_stop.rs:2108 tests/run.rs:210 tests/scoped_names.rs:45 tests/spawn_registration.rs:50 tests/spawner_lifeline_kill.rs:133 tests/topology_cmd.rs:50 tests/wit_level.rs:250std::net::UdpSocket::bindtests/control_surface.rs:1046std::net::TcpListenertests/install_default_source.rs:84 tests/install_default_source.rs:92 tests/scoped_names.rs:39std::net::ToSocketAddrs::to_socket_addrstests/streaming_protocol_doc.rs:563tokio::net::TcpSocket::new_v4tests/streaming_protocol_doc.rs:572
low process_spawn test 112
std::process::Command::newtests/busy_door.rs:150 tests/cancel.rs:828 tests/cancel.rs:1545 tests/closed_output.rs:71 tests/closed_output.rs:189 tests/closed_output.rs:283 tests/common/door_capsule.rs:265 tests/common/loopback_target.rs:189 tests/common/loopback_target.rs:224 tests/common/mod.rs:59 tests/common/mod.rs:384 tests/compiled_forms.rs:625 tests/control_surface.rs:111 tests/delegation.rs:2988 tests/dev_version_script.rs:23 tests/dev_version_script.rs:70 tests/door_token.rs:34 tests/driver_switch.rs:117 tests/driver_switch.rs:514 tests/egress_namespace_probe.rs:100 tests/egress_namespace_probe.rs:113 tests/eval_variant.rs:617 tests/formation_calls.rs:229 tests/formation_calls.rs:805 tests/formation_calls.rs:1436 tests/formation_calls.rs:2058 tests/formation_calls.rs:2296 tests/formation_channel.rs:95 tests/formation_launch.rs:320 tests/formation_launch.rs:2046 tests/formation_launch.rs:2161 tests/formation_lifeline.rs:61 tests/formation_lifeline.rs:565 tests/formation_retention.rs:188 tests/formation_retention.rs:262 tests/formation_retention.rs:273 tests/index_cmd.rs:149 tests/index_cmd.rs:157 tests/inference_credential_rotation.rs:229 tests/inference_credential_rotation.rs:805 tests/inference_retry.rs:194 tests/inference_retry.rs:213 tests/install_script.rs:186 tests/install_script.rs:455 tests/json_launch.rs:591 tests/json_launch.rs:853 tests/launch_task.rs:75 tests/native_tool_confinement.rs:785 tests/native_tool_confinement.rs:924 tests/new_roster.rs:74 and 39 morestd::process::Commandtests/closed_output.rs:70 tests/closed_output.rs:96 tests/common/formation.rs:195 tests/control_surface.rs:110 tests/dev_version_script.rs:22 tests/driver_switch.rs:116 tests/egress_namespace_probe.rs:99 tests/egress_namespace_probe.rs:112 tests/egress_namespace_probe.rs:129 tests/egress_namespace_probe.rs:134 tests/egress_namespace_probe.rs:465 tests/formation_channel.rs:151 tests/formation_launch.rs:319 tests/formation_lifeline.rs:60 tests/formation_retention.rs:187 tests/inference_credential_rotation.rs:228 tests/inference_retry.rs:212 tests/new_roster.rs:73 tests/spawner_lifeline.rs:60 tests/spawner_lifeline_kill.rs:181 tests/spawner_lifeline_kill.rs:233 tests/spawner_lifeline_kill.rs:314 tests/spawner_lifeline_kill.rs:1407
low network_access library 13
std::net::TcpStreamsrc/commands/cancel.rs:239std::net::TcpStream::connect_timeoutsrc/commands/cancel.rs:246std::net::TcpListener::bindsrc/commands/cancel.rs:269 src/commands/topology.rs:554 src/default_versions.rs:407ureq::Agentsrc/commands/topology.rs:145 src/http.rs:5 src/source/github.rs:56std::net::TcpStream::connectsrc/commands/watch.rs:27ureq::Agent::config_buildersrc/http.rs:6ureq::http::StatusCode::NOT_FOUNDsrc/source/github.rs:193ureq::http::Responsesrc/source/github.rs:274ureq::Bodysrc/source/github.rs:274
low process_spawn library 6
low build_script build_script 1
build.rsbuild.rs
info url_literal test 153
name: {name}\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: local/tool-progress-driver\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:1\u{a} …tests/a2a_v1_stream.rs:89https://example.com/x/v1tests/a2a_v1_stream.rs:449http://127.0.0.1:8080tests/bootstrap.rs:363http://{}tests/common/github_release.rs:67 tests/common/mod.rs:177 tests/completion_lane.rs:367 tests/delegation.rs:187 tests/delegation.rs:444 tests/delegation.rs:477 tests/deploy_cmd.rs:562 tests/doctor_cmd.rs:72 tests/door_discovery.rs:622 tests/formation_retention.rs:52 tests/github_rate_limit.rs:105 tests/inference_credential_rotation.rs:88 tests/inference_retry.rs:96 tests/install_default_source.rs:86 tests/new_roster.rs:1501 tests/peer_handoff.rs:156 tests/run.rs:211 tests/running_address.rs:1143 tests/scoped_names.rs:46 tests/spawn_registration.rs:51 tests/spawner_lifeline_kill.rs:134 tests/wit_level.rs:251http://{addr}tests/common/mod.rs:974 tests/door_auth.rs:247 tests/topology_cmd.rs:52https://docs.murmur.nexus/reference/agent-card/#murmur-door-v1tests/common/mod.rs:1343https://docs.murmur.nexus/reference/agent-card/#murmur-capsule-v1tests/common/mod.rs:1347https://docs.murmur.nexus/reference/streaming-protocol/#murmur-stream-v1tests/common/mod.rs:1351http://127.0.0.1:{port}tests/common/recording_upstream.rs:109 tests/deploy_precompile.rs:698 tests/inference_gateway.rs:90 tests/native_tool_confinement.rs:517 tests/topology_cmd.rs:305capabilities:\u{a} containment: sealed\u{a} network:\u{a} allow:\u{a} - https://api.example.com\u{a}tests/containment.rs:146https://api.example.comtests/containment.rs:166 tests/trace.rs:730http://127.0.0.1:9tests/continuation.rs:32 tests/control_surface.rs:1353 tests/control_surface.rs:1554 tests/credential_gateway.rs:507 tests/deny.rs:867 tests/doctor_cmd.rs:2324 tests/done_check.rs:983 tests/driver_switch.rs:967 tests/driver_switch.rs:1251 tests/driver_switch.rs:1341 tests/driver_switch.rs:1358 tests/egress_namespace_probe.rs:384 tests/egress_namespace_probe.rs:585 tests/egress_namespace_probe.rs:635 tests/inference_gateway.rs:377 tests/keep_working.rs:855 tests/model_limits.rs:627 tests/model_limits.rs:652 tests/process_subscription_e2e.rs:1364 tests/session_status.rs:1105 tests/session_status.rs:1191 tests/session_temp_folder.rs:234 tests/task_outcome.rs:370 tests/trace_capture.rs:35 tests/truncated_turn.rs:47 tests/usage_reporting.rs:49https://cards.example.comtests/control_surface.rs:1555 tests/control_surface.rs:1593http://127.0.0.1:1tests/conversation.rs:308 tests/doctor_cmd.rs:1178 tests/door_auth.rs:616 tests/no_registry_service.rs:87 tests/peer_tasks.rs:655 tests/scoped_names.rs:846 tests/spawn_registration.rs:252 tests/spawn_registration.rs:260https://docs.murmur.nexus/reference/diagnostics/#w-sec-025tests/credential_gateway.rs:54 tests/inference_gateway.rs:261https://docs.murmur.nexus/reference/diagnostics/#w-sec-027tests/credential_gateway.rs:55 tests/inference_credential_rotation.rs:35https://docs.murmur.nexus/reference/diagnostics/#w-sec-030tests/credential_gateway.rs:56http://127.0.0.1:9/v1tests/credential_gateway.rs:420endpoint: https://api.anthropic.com\u{a}tests/credential_gateway.rs:1124http://tests/delegation.rs:845 tests/delegation.rs:1303 tests/delegation.rs:1319 tests/deploy_precompile.rs:198 tests/formation_calls.rs:600 tests/formation_calls.rs:1994 tests/formation_calls.rs:2290 tests/formation_launch.rs:483 tests/formation_launch.rs:631 tests/formation_launch.rs:657https://1.2.3.4:8080tests/deploy_cmd.rs:143name: my-agent\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: murmur/driver-openai\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://localhost:8080\u{a} …tests/deploy_cmd.rs:687name: solo\u{a}version: 0.0.1\u{a}artifacts:\u{a} - name: local/murmur-driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080\u{a} …tests/doctor_cmd.rs:275 tests/doctor_cmd.rs:1783{declared} gateway:\u{a} endpoint: https://api.example.com\u{a} api_key: test-key\u{a}tests/doctor_cmd.rs:671- name: local/pulled-skill\u{a} version: 0.1.0\u{a} runtime: skill\u{a} - name: local/murmur-driver-anthropic\u{a} version: 0.1.4\u{a} runtime: driver\u{a} gateway:\u{a} endpoin…tests/doctor_cmd.rs:725no daemon answered at http://127.0.0.1:1tests/doctor_cmd.rs:1185name: worker\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: local/murmur-driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080…tests/doctor_cmd.rs:1707name: root-capsule\u{a}version: 0.0.1\u{a}artifacts:\u{a} - name: local/murmur-driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:80…tests/doctor_cmd.rs:1883name: stripped-env-capsule\u{a}version: 0.1.0\u{a}capabilities:\u{a} env:\u{a} allow:\u{a} - GITHUB_TOKEN\u{a}artifacts:\u{a} - name: local/uninstalled-tool\u{a} version: 0.1.0\u{a} ru…tests/env_allow_stripped.rs:167coder=http://localhost:1tests/formation_channel.rs:238peers=coder=http://coder.formation.invalidtests/formation_launch.rs:685 tests/formation_launch.rs:1031peers=reviewer=http://reviewer.formation.invalidtests/formation_launch.rs:698[mur run] warning[W-ROS-001]: roster.yaml lets 3 members call 'tester' (coder, reviewer, planner), but it holds 2 tasks at once — one running and lifecycle.queue_depth: 1 waiting — so a call that …tests/formation_launch.rs:949coder=http://localhost:41873tests/formation_launch.rs:1659coder=http://localhost:41873 reviewer=http://localhost:1tests/formation_launch.rs:1665{"message":"API rate limit exceeded for 127.0.0.1. (But here's the good news: Authenticated requests get a higher rate limit.)","documentation_url":"https://docs.github.com/rest/overview/resources-in-…tests/github_rate_limit.rs:26MURMUR_INFERENCE_ENDPOINT=http://127.0.0.1:9tests/inference_gateway.rs:562http://127.0.0.1:{}tests/inference_retry.rs:166 tests/process_subscription_e2e.rs:464https://github.com/{REPO}/releases/download/v{VERSION}/tests/install_script.rs:273https://docs.murmur.nexus/reference/diagnostics/#w-run-009tests/model_limits.rs:385http://localhost:9999tests/murmur_md.rs:106 tests/murmur_md.rs:164 tests/murmur_md.rs:219 tests/murmur_md.rs:270 tests/murmur_md.rs:383 tests/murmur_md.rs:433https://github.comtests/native_tool_confinement.rs:1067https://release-assets.githubusercontent.comtests/native_tool_confinement.rs:1068https://api.anthropic.comtests/new_roster.rs:1133https://api.openai.com/v1tests/new_roster.rs:1209inference:\u{a} provider: anthropic\u{a} model: my-model\u{a} endpoint: http://127.0.0.1:4242\u{a} api_key: {}\u{a}tests/new_roster.rs:1238http://127.0.0.1:4242tests/new_roster.rs:1247inference:\u{a} endpoint: http://example.com\u{a}tests/new_roster.rs:1281http://{}/artifacts-index.jsontests/new_roster.rs:1523capabilities:\u{a} peer_fetch:\u{a} allow:\u{a} - "http://[not a host"\u{a}tests/peer_handoff.rs:1655- name: {STREAMING_DRIVER}\u{a} version: {VERSION}\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:1\u{a} api_key: test-key\u{a}tests/process_a2a_parity.rs:295- name: {TOOL_PROGRESS_DRIVER}\u{a} version: {VERSION}\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:1\u{a} api_key: test-key\u{a} - name: local/{TOOL}\u{a} …tests/process_a2a_parity.rs:335gateway:\u{a} endpoint: "http://127.0.0.1:9"\u{a} keyless: true\u{a}tests/process_driver.rs:56 tests/process_driver.rs:275name: {CAPSULE}-http\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: {HTTP_DRIVER}\u{a} version: {DRIVER_VERSION}\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:1…tests/process_sessions.rs:1394name: {CAPSULE_NAME}\u{a}version: 0.1.0\u{a}{blocks}artifacts:\u{a} - name: {artifact_name}\u{a} version: 0.1.0\u{a} runtime: tool\u{a} - name: local/murmur-driver-anthropic\u{a} version: 0…tests/reserved_tool_names.rs:35https://docs.murmur.nexus/reference/diagnostics/#w-ros-001tests/roster.rs:24network:\u{a} allow:\u{a} - https://allowed.example.com\u{a}tests/run.rs:298network:\u{a} allow:\u{a} - https://blocked.example.com\u{a}tests/run.rs:333name: capsule\u{a}version: 0.0.1\u{a}artifacts:\u{a} - name: local/dummy-driver\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080\u{a} api…tests/run.rs:525- name: {TOOL_ARTIFACT}\u{a} version: {TOOL_VERSION}\u{a} gateway:\u{a} endpoint: https://api.example.com\u{a} api_key: test-key\u{a}tests/run.rs:702name: scoped-capsule\u{a}version: 0.1.0\u{a}{blocks}artifacts:\u{a}{artifacts} - name: {DRIVER}\u{a} version: {DRIVER_VERSION}\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://1…tests/scoped_names.rs:84https://this-does-not-exist.invalid/artifacts-index.jsontests/search_cmd.rs:458https://docs.murmur.nexus/reference/diagnostics/#w-sec-024tests/secret_shaped_env.rs:16name: cap\u{a}version: 0.1.0\u{a}inference:\u{a} transport: http\u{a} model: test\u{a} driver:\u{a} artifact: local/dummy-driver\u{a}artifacts:\u{a} - name: ghost\u{a} source: ./skills/ghost…tests/skill_local_source.rs:350name: cap\u{a}version: 0.1.0\u{a}inference:\u{a} transport: http\u{a} model: test\u{a} driver:\u{a} artifact: local/dummy-driver\u{a}artifacts:\u{a} - name: empty-skill\u{a} source: ./skills…tests/skill_local_source.rs:375hint: https://docs.murmur.nexus/reference/wit-levels/ lists which mur release serves which WIT leveltests/source_resolution.rs:735registry:\u{a} sources:\u{a} - url: https://example.com\u{a} repo: ana/a\u{a}tests/source_resolution.rs:1177name: streaming-test\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: {STREAMING_DRIVER_NAME}\u{a} version: {STREAMING_DRIVER_VERSION}\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: ht…tests/streaming.rs:537- https://api.example.com\u{a}tests/trace.rs:644{{"event_type":"a2a_send","event_id":"evt_7","parent_id":"evt_1","session_id":"{s}","timestamp":1210,"peer_url":"http://peer.example/a2a","message_id":"msg-out","task_id":"tsk_peer","context_id":"ctx_…tests/trace_cmd.rs:2944http://peer.example/a2atests/trace_cmd.rs:2990name: retry-capsule\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: local/drv\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080\u{a} api_ke…tests/unknown_manifest_keys.rs:170
info url_literal library 70
http://src/commands/cancel.rs:34 src/commands/search.rs:77 src/commands/stop.rs:495 src/commands/watch.rs:24https://src/commands/cancel.rs:35 src/commands/search.rs:77 src/commands/stop.rs:496 src/commands/watch.rs:25https://example.com/artifacts-index.jsonsrc/commands/config_cmd.rs:167 src/commands/search.rs:305registry:\u{a} index_url: https://example.com/kept.json\u{a}credentials:\u{a} OTHER_KEY: keep-me\u{a}src/commands/config_cmd.rs:239https://example.com/kept.jsonsrc/commands/config_cmd.rs:253https://api.github.comsrc/commands/deploy.rs:607 src/source/github.rs:459http://{host}:{port}src/commands/deploy.rs:1843name: cap\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: murmur/driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://localhost:8080\u{a} ke…src/commands/deploy.rs:2235 src/commands/deploy.rs:2256 src/commands/deploy.rs:2278 src/commands/deploy.rs:2298 src/commands/deploy.rs:2324export OPENAI_API_KEY=sk-xxx\u{a}export DB_URL=postgres://\u{a}src/commands/deploy.rs:2574DB_URL=postgres://src/commands/deploy.rs:2578name: my-agent\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: local/drv\u{a} version: 1.0.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: https://api.example.com\u{a} api_key: …src/commands/deploy.rs:3207http://203.0.113.9:41873src/commands/deploy.rs:3220 src/commands/deploy.rs:3233 src/commands/deploy.rs:3255 src/commands/deploy.rs:3277warning[W-SEC-032]: the door is published at http://203.0.113.9:41873 and network.authentication is not declaredsrc/commands/deploy.rs:3228https://1.2.3.4:8080src/commands/deploy_state.rs:174[mur doctor] warning[{E_RUN_019}]: this capsule declares capabilities.spawn.allow, and {ROOST_BINARY} was not found on PATH.\u{a} `mur run` refuses a capsule that cannot register with the daemon that…src/commands/doctor.rs:817[mur doctor] warning[{E_RUN_019}]: this capsule declares capabilities.spawn.allow, and {ROOST_BINARY} is installed at {binary}, but MURMUR_ROOST_URL — the variable naming the daemon to register with…src/commands/doctor.rs:830https://github.comsrc/commands/new.rs:86 src/commands/new.rs:1187 src/commands/new.rs:1208 src/commands/new.rs:1245https://release-assets.githubusercontent.comsrc/commands/new.rs:87 src/commands/new.rs:1188 src/commands/new.rs:1209 src/commands/new.rs:1246https://custom.proxy.example.comsrc/commands/new.rs:761https://api.anthropic.comsrc/commands/new.rs:844 src/commands/new_roster.rs:48http://127.0.0.1:8080/x/artifacts-index.jsonsrc/commands/new.rs:1097 src/commands/new.rs:1200http://127.0.0.1:8080src/commands/new.rs:1202 src/commands/new.rs:1210https://github.com/ana/my-artifacts/releases/latest/download/artifacts-index.jsonsrc/commands/new.rs:1236https://api.openai.com/v1src/commands/new_roster.rs:56set inference.endpoint to an https:// URL, or an http:// URL on localhost or a loopback address; or remove it to use {}src/commands/new_roster.rs:346http://127.0.0.1:9999src/commands/new_roster.rs:1205http://127.0.0.1:4242src/commands/new_roster.rs:1272 src/commands/new_roster.rs:1279https://github.com/murmur-nexus/default-artifacts/releases/latest/download/artifacts-index.jsonsrc/commands/search.rs:19https://github.com/{DEFAULT_ARTIFACTS_REPO}/releases/latest/download/{ARTIFACT_INDEX_FILE_NAME}src/commands/search.rs:290http://127.0.0.1:8080/artifacts-index.jsonsrc/commands/search.rs:304https://cdnjs.cloudflare.com/ajax/libs/vis-network/9.1.9/dist/vis-network.min.jssrc/commands/topology.rs:20https://cdnjs.cloudflare.com/ajax/libs/vis-network/9.1.9/dist/dist/vis-network.min.csssrc/commands/topology.rs:22http://{addr}src/commands/topology.rs:557registry:\u{a} default: official\u{a} sources:\u{a} - name: official\u{a} type: github\u{a} repo: some-user/custom-artifacts\u{a} url: https://example.com\u{a}src/config.rs:655registry:\u{a} index_url: https://example.com/index.json\u{a}src/config.rs:1050http://{}/artifacts-index.jsonsrc/default_versions.rs:409name: infer-worker\u{a}version: 0.1.0\u{a}artifacts:\u{a} - name: murmur/driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080…src/env_requirements.rs:931name: solo\u{a}version: 0.0.1\u{a}artifacts:\u{a} - name: murmur/driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080\u{a} k…src/env_requirements.rs:960name: solo\u{a}version: 0.0.1\u{a}artifacts:\u{a} - name: murmur/driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080\u{a} a…src/env_requirements.rs:977 src/env_requirements.rs:1014 src/env_requirements.rs:1032name: src-root\u{a}version: 0.0.1\u{a}artifacts:\u{a} - name: murmur/driver-anthropic\u{a} version: 0.1.0\u{a} runtime: driver\u{a} gateway:\u{a} endpoint: http://127.0.0.1:8080\u{a} …src/env_requirements.rs:1068{"message":"API rate limit exceeded for 127.0.0.1.","documentation_url":"https://docs.github.com/rest/overview/resources-in-the-rest-api#rate-limiting"}src/source/github.rs:468https://docs.murmur.nexus/reference/wit-levels/src/source/mod.rs:1742registry:\u{a} sources:\u{a} - url: https://x\u{a} repo: ana/a\u{a}src/source/mod.rs:1897
info unsafe_code test 10
2 unsafe blocks, functions or implstests/common/formation.rs:150 tests/common/mod.rs:138 tests/formation_channel.rs:155 tests/formation_launch.rs:551 tests/spawner_lifeline.rs:508 tests/spawner_lifeline_kill.rs:14121 unsafe blocks, functions or implstests/common/loopback_target.rs:250 tests/formation_lifeline.rs:500 tests/process_cancel.rs:99 tests/session_network_namespace.rs:272
info unsafe_code library 4
3 unsafe blocks, functions or implssrc/commands/control.rs:3892 unsafe blocks, functions or implssrc/commands/deploy.rs:269610 unsafe blocks, functions or implssrc/commands/new.rs:8146 unsafe blocks, functions or implssrc/config.rs:588
info environment_enumeration test 1
std::env::vars_os, keys onlytests/new_roster.rs:1081
info url_literal binary 1
Artifact index whose newest version that fits this mur the members' driver is pinned at: an http:// or https:// URL is fetched; any other value is an index file. "local" is refused. Omitted, the index…src/main.rs:75
Run: check
succeeded- Ended
- agent reported the end
- Guest
- exit code 0
- Run time
- 638 ms
- VM restore
- 62 ms
- Payload
- 16988 files, 378.7 MiB
- Files opened
- 851
Processes 2
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | check --locked --offline | 6 ms | 622 ms | 0 |
| └rustc /usr/local/bin/rustc | --crate-name crateward_probe --edition=2021 lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata -C embed-bitcode=no -C debuginfo=2 --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=d9152fcf76bf9b7f -C extra-filename=-8c7788aadf5d3a75 --out-dir /work/target/debug/deps -C incremental=/work/target/debug/incremental -L dependency=/work/target/debug/deps | 404 ms | 199 ms | 0 |
Network 0
No network activity.
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 21
- Directories
- 19
- Size
- 77.8 KiB
- Compiled units
- 1
Nothing outside the build areas.
Output
Standard error
warning: crateward-probe v0.0.0 (/cw/probe) ignoring invalid dependency `target` which is missing a lib target
Checking crateward-probe v0.0.0 (/cw/probe)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.55s
Timeline
6
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-27 00:22 UTC | Discovered | Fetched | fetched | fetcher-12688 |
| 2026-10-27 00:22 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-12726 |
| 2026-10-27 00:22 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-12760-slot1 |
| 2026-10-27 00:22 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-12760-slot1 |
| 2026-10-27 00:22 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-12816 |
| 2026-10-27 00:22 UTC | Scored | Done | finalized | analyzer-12816 |