vizier 0.13.4

Done dynamic on Linux job 295412 crates.io SBOM Findings (VEX)

medium severity process_spawn in build_script code (8 places): std::process::Command::new

low

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	static:process_spawn static · vizier	build.rs:14	medium severity process_spawn in build_script code (8 places): std::process::Command::new
2	static:included_binary static · vizier	src/stt/whisper.rs:373	medium severity included_binary in library code: src/stt/fixtures/tone.webm (4691 bytes)
2	static:obfuscated_data static · vizier	src/llm/resolve.rs:491	medium severity obfuscated_data in library code: large byte string literal
2	static:secret_environment_variable static · vizier	src/encryption/fields.rs:747	medium severity secret_environment_variable in library code (4 places): GITHUB_TOKEN
2	static:yara:invisible_characters static · vizier	webui/build/client/assets/Tab-B8UKab4A.js:204	medium severity yara:invisible_characters in library code: Zero width or invisible characters, which can hide identifiers or payloads
1	static:build_script static · vizier	build.rs	low severity build_script in build_script code: build.rs

Behavior

New since the previous version

static:included_binary

Profile

static:included_binary static:obfuscated_data static:process_spawn static:secret_environment_variable static:yara:invisible_characters

Static findings

All 807 medium 8 low 666 info 133 10 groups

medium secret_environment_variable library 4

GITHUB_TOKEN src/encryption/fields.rs:747 src/encryption/storage_tests.rs:379
OPENAI_API_KEY src/provider_keys.rs:43
ANTHROPIC_API_KEY src/provider_keys.rs:44

medium included_binary library 1

src/stt/fixtures/tone.webm (4691 bytes) src/stt/whisper.rs:373

medium obfuscated_data library 1

large byte string literal src/llm/resolve.rs:491

medium process_spawn build_script 1

std::process::Command::new build.rs:14

medium yara_match invisible_characters library 1

Zero width or invisible characters, which can hide identifiers or payloads webui/build/client/assets/Tab-B8UKab4A.js:204

low network_access library 658

low process_spawn library 7

tokio::process::Command::new src/agents/mcp/mod.rs:376
std::process::Command::new src/agents/shell/local/mod.rs:24 src/agents/tools/skill/execute_skill_resource.rs:87 src/skill/install.rs:11 src/skill/install.rs:83 src/skill/install.rs:96 src/skill/install.rs:151

low build_script build_script 1

build.rs build.rs

info url_literal library 130

# BOOT.md - Operating Doctrine\u{a}\u{a}You are {name}, {description}, running on [Vizier](https://vizier.rs) v{version}.\u{a}\u{a}## Time\u{a}\u{a}The `# Context` block in each message gives the syst… src/agents/agent/system_prompt/boot.rs:3
https://api.search.brave.com/res/v1/web/search src/agents/tools/brave_search/mod.rs:76
https://chatgpt.com/backend-api/codex src/catalogue/builtin.rs:32
http://localhost:11434 src/catalogue/builtin.rs:45 src/llm/media/mod.rs:37 src/llm/resolve.rs:614
http://localhost:8080 src/catalogue/builtin.rs:54
http://127.0.0.1:9998/v1 src/catalogue/builtin.rs:72 src/channels/http/api/v1/providers/mod.rs:510 src/llm/resolve.rs:619 src/provider_keys.rs:190 src/provider_keys.rs:193
https://api.voyageai.com/v1 src/catalogue/builtin.rs:90 src/llm/media/mod.rs:34
https://api.openai.com/v1 src/catalogue/data.rs:386 src/catalogue/data.rs:492 src/llm/media/mod.rs:25
https://api.anthropic.com/v1 src/catalogue/data.rs:387 src/llm/dialect/anthropic.rs:297 src/llm/resolve.rs:571
https://generativelanguage.googleapis.com/v1beta src/catalogue/data.rs:388 src/llm/media/mod.rs:28
https://api.groq.com/openai/v1 src/catalogue/data.rs:389 src/llm/media/mod.rs:26
https://api.mistral.ai/v1 src/catalogue/data.rs:390 src/llm/media/mod.rs:27
https://api.x.ai/v1 src/catalogue/data.rs:391 src/llm/media/mod.rs:31
https://api.together.xyz/v1 src/catalogue/data.rs:392 src/llm/media/mod.rs:33
https://api.perplexity.ai src/catalogue/data.rs:393
https://api.cerebras.ai/v1 src/catalogue/data.rs:394
https://api.deepinfra.com/v1/openai src/catalogue/data.rs:395
https://api.cohere.ai/compatibility/v1 src/catalogue/data.rs:396
{\u{a} "acme": {"id": "acme", "name": "Acme", "env": ["ACME_API_KEY"], "npm": "@ai-sdk/openai-compatible",\u{a} "api": "https://api.acme.test/v1", "unknown_field": 1,\u{a} … src/catalogue/data.rs:420
https://api.acme.test/anthropic/v1 src/catalogue/data.rs:467
https://api.acme.test/v1 src/catalogue/data.rs:472
https://openrouter.ai/api/v1/models?output_modalities=speech src/catalogue/media.rs:69
https://openrouter.ai/api/v1/models?output_modalities=transcription src/catalogue/media.rs:70
https://openrouter.ai/api/v1/images/models src/catalogue/media.rs:71
http://x/v1 src/catalogue/mod.rs:294
{}://{}/logos/{id}.svg src/catalogue/refresh.rs:319
{"a": {"id": "a", "npm": "@ai-sdk/openai-compatible", "api": "https://a"}, "b": {"id": "b", "npm": "@ai-sdk/openai-compatible", "api": "https://b"}, "c": {"id": "c", "npm": "@ai-sdk/openai-compatible"… src/catalogue/refresh.rs:400
{"b": {"id": "b", "npm": "@ai-sdk/openai-compatible", "api": "https://b"}} src/catalogue/refresh.rs:405
{"a": {"id": "a", "npm": "@ai-sdk/openai-compatible", "api": "https://a"}, "c": {"id": "c", "npm": "@ai-sdk/openai-compatible", "api": "https://c"}} src/catalogue/refresh.rs:407
https://models.dev/api.json src/catalogue/seed.rs:36 src/config/mod.rs:118
http://h/v1 src/channels/http/api/v1/providers/custom.rs:484 src/channels/http/api/v1/providers/custom.rs:501
http://h/v1/ src/channels/http/api/v1/providers/custom.rs:494
http://127.0.0.1:19998/v1 src/channels/http/api/v1/providers/mod.rs:517 src/channels/http/api/v1/providers/mod.rs:523 src/channels/http/api/v1/providers/mod.rs:527 src/channels/http/api/v1/providers/mod.rs:530
https://api.telegram.org/file/bot{}/{} src/channels/telegram/mod.rs:262 src/channels/telegram/mod.rs:284
\u{a}### Onboarding complete!\u{a}\u{a}Configuration saved to `{}`\u{a}\u{a}| | |\u{a}|---|---|\u{a}| **Start server** | `vizier run` |\u{a}| **WebUI** | `http://localhost:{}` |\u{a}\u{a}Open the WebU… src/cli/onboard.rs:115
https://endpoint.example src/encryption/fields.rs:503 src/encryption/fields.rs:627 src/encryption/storage_tests.rs:354 src/storage/sqlite/provider.rs:182 src/storage/sqlite/provider.rs:186
https://base.example/v1 src/encryption/fields.rs:504 src/encryption/fields.rs:631 src/storage/sqlite/provider.rs:181
https://acme.invalid/v1 src/encryption/fields.rs:519 src/encryption/storage_tests.rs:417 src/storage/sqlite/provider.rs:209 src/storage/sqlite/provider.rs:224
\u{a} INSERT INTO agent_secret (agent_id, name, value, created_at, updated_at, updated_by)\u{a} VALUES ('dp-a', 'AGENT_TOKEN', 'agent-token-abc123', 'now', 'now', '"admin"');… src/encryption/migrate.rs:345
https://api.githubcopilot.com src/llm/auth.rs:95
https://api.github.com/copilot_internal/v2/token src/llm/auth.rs:96
:// src/llm/auth.rs:254
https://{proxy_ep} src/llm/auth.rs:257
https://{api_host} src/llm/auth.rs:277
https://api.openai.com/auth src/llm/auth.rs:347
https://api.individual.githubcopilot.com src/llm/auth.rs:369 src/llm/auth.rs:376
tid=1;proxy-ep=https://proxy.individual.githubcopilot.com;exp=2 src/llm/auth.rs:373
tid=1;proxy-ep=http://proxy.individual.githubcopilot.com;exp=2 src/llm/auth.rs:381
tid=1;proxy-ep=https://evil.example.com;exp=2 src/llm/auth.rs:386
tid=1;proxy-ep=https://proxy.individual.githubcopilot.com/base;exp=2 src/llm/auth.rs:391
https://api.anthropic.com src/llm/dialect/anthropic.rs:433
https://x/v1beta/models?key=AIzaSECRET&alt=json src/llm/http.rs:170
https://x/v1beta/models?key=[redacted]&alt=json src/llm/http.rs:171
https://api.cohere.ai/v1 src/llm/media/cohere.rs:10
http://{} src/llm/media/golden_tests.rs:91 src/llm/transport_tests.rs:72
https://router.huggingface.co/hf-inference/models src/llm/media/huggingface.rs:12
https://api.hyperbolic.xyz/v1 src/llm/media/hyperbolic.rs:12
https://openrouter.ai/api/v1 src/llm/media/mod.rs:30
http://127.0.0.1:1 src/llm/resolve.rs:77
https://${AZURE_RESOURCE_NAME}.openai.azure.com src/llm/resolve.rs:256
https://r.test/anthropic/v1 src/llm/resolve.rs:581
https://myres.openai.azure.com/ src/llm/resolve.rs:589
https://myres.openai.azure.com/openai/deployments/gpt-4o src/llm/resolve.rs:593
https://${X}.test src/llm/resolve.rs:595
https://abc.test src/llm/resolve.rs:595
https://${VZT_SURELY_UNSET}.test src/llm/resolve.rs:596
http://localhost:8080/v1 src/llm/resolve.rs:616
http://configured.test/v1 src/llm/resolve.rs:621 src/llm/resolve.rs:625
http://env.test/v1 src/llm/resolve.rs:639 src/llm/resolve.rs:646
http://10.0.0.5/v1 src/llm/resolve.rs:657
http://127.0.0.1:{port} src/llm/transport_tests.rs:149
https://opencode.ai/zen/v1 src/provider_migration.rs:39
https://opencode.ai/zen/go/v1 src/provider_migration.rs:40
https://api.moonshot.ai/v1 src/provider_migration.rs:41
https://api.z.ai/api/paas/v4 src/provider_migration.rs:42
https://api.minimax.io/v1 src/provider_migration.rs:43
http://gpu:11434 src/provider_migration.rs:495
https://r.openai.azure.com src/provider_migration.rs:497
https://proxy.example/go/v1 src/provider_migration.rs:501
http://127.0.0.1:18080/v1 src/provider_migration.rs:504
https://github.com/vizier-lab/vizier.git src/skill/install.rs:8
git is not working properly. Please install git: https://git-scm.com/downloads src/skill/install.rs:17
git is required for skill installation. Install git: https://git-scm.com/downloads src/skill/install.rs:22
http:// src/skill/install.rs:28 src/skill/install.rs:31
https:// src/skill/install.rs:28 src/skill/install.rs:31
https://github.com/{}.git src/skill/install.rs:34
https://a/b src/skill/invocation.rs:174
see [screenshot](notes.png) and [site](https://example.com/page) and [mail](mailto:a@b.com) src/storage/memory_bundle.rs:2574
http://x src/storage/sqlite/integration.rs:613
https://api.elevenlabs.io/v1/speech-to-text src/stt/elevenlabs.rs:40
https://huggingface.co/ggerganov/whisper.cpp/resolve/main src/stt/whisper.rs:12
https://api.elevenlabs.io/v1/text-to-speech/{} src/tts/elevenlabs.rs:27
https://huggingface.co/{}/resolve/main/{file}?download=true src/tts/kokoro.rs:134

info unsafe_code library 3

2 unsafe blocks, functions or impls src/llm/resolve.rs:639
4 unsafe blocks, functions or impls src/provider_keys.rs:165
1 unsafe blocks, functions or impls src/storage/sqlite/mod.rs:174

Run: check

failed

Ended: agent reported the end
Guest: exit code 101
Run time: 694 ms
VM restore: 66 ms
Payload: 45749 files, 941.5 MiB
Missing packages: kanaria 0.2.0
Files opened: 1934

Processes 1

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	679 ms	25856

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 6
Directories: 12
Size: 624 B
Compiled units: 0

Nothing outside the build areas.

Output

Standard error

error: no matching package named `kanaria` found
location searched: directory source `/cw/vendor` (which is replacing registry `crates-io`)
required by package `lindera v2.3.4`
    ... which satisfies dependency `lindera = "^2.3.4"` (locked to 2.3.4) of package `any-tts v0.2.0`
    ... which satisfies dependency `any-tts = "^0.2.0"` (locked to 0.2.0) of package `vizier v0.13.4`
    ... which satisfies dependency `target = "=0.13.4"` (locked to 0.13.4) of package `crateward-probe v0.0.0 (/cw/probe)`
note: offline mode (via `--offline`) can sometimes cause surprising resolution failures
help: if this error is too confusing you may wish to retry without `--offline`

Timeline

When	From	To	Event	Worker
2026-10-28 02:40 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-28 02:40 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-28 02:40 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot1
2026-10-28 02:40 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot1
2026-10-28 02:40 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-28 02:40 UTC	Scored	Done	finalized	analyzer-12816