vizier 0.13.5

Done dynamic on Linux job 308012 crates.io SBOM Findings (VEX) Compare with 0.13.4

medium severity process_spawn in build_script code (8 places): std::process::Command::new

low

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	static:process_spawn static · vizier	build.rs:14	medium severity process_spawn in build_script code (8 places): std::process::Command::new
2	static:included_binary static · vizier	src/stt/whisper.rs:373	medium severity included_binary in library code: src/stt/fixtures/tone.webm (4691 bytes)
2	static:obfuscated_data static · vizier	src/catalogue/mod.rs:266	medium severity obfuscated_data in library code (2 places): large byte string literal
2	static:secret_environment_variable static · vizier	src/channels/http/api/v1/catalogue.rs:826	medium severity secret_environment_variable in library code (28 places): AWS_ACCESS_KEY_ID
2	static:yara:invisible_characters static · vizier	webui/build/client/assets/Tab-B8UKab4A.js:204	medium severity yara:invisible_characters in library code: Zero width or invisible characters, which can hide identifiers or payloads
1	static:build_script static · vizier	build.rs	low severity build_script in build_script code: build.rs

Behavior

Profile

static:included_binary static:obfuscated_data static:process_spawn static:secret_environment_variable static:yara:invisible_characters

Static findings

All 917 medium 33 low 731 info 153 10 groups

medium secret_environment_variable library 28

AWS_ACCESS_KEY_ID src/channels/http/api/v1/catalogue.rs:826 src/llm/resolve.rs:734 src/llm/resolve.rs:859 src/llm/resolve.rs:871 src/provider_keys.rs:96 src/provider_keys.rs:232 src/provider_keys.rs:239 src/provider_keys.rs:250 src/provider_keys.rs:264 src/provider_keys.rs:278
AWS_SECRET_ACCESS_KEY src/channels/http/api/v1/catalogue.rs:826 src/llm/resolve.rs:735 src/llm/resolve.rs:859 src/llm/resolve.rs:865 src/provider_keys.rs:97 src/provider_keys.rs:233 src/provider_keys.rs:239 src/provider_keys.rs:265
AWS_SESSION_TOKEN src/channels/http/api/v1/catalogue.rs:826 src/llm/resolve.rs:736 src/provider_keys.rs:47 src/provider_keys.rs:98 src/provider_keys.rs:234 src/provider_keys.rs:266
GITHUB_TOKEN src/encryption/fields.rs:789 src/encryption/storage_tests.rs:379
OPENAI_API_KEY src/provider_keys.rs:57
ANTHROPIC_API_KEY src/provider_keys.rs:58

medium obfuscated_data library 2

large byte string literal src/catalogue/mod.rs:266 src/llm/resolve.rs:589

medium included_binary library 1

src/stt/fixtures/tone.webm (4691 bytes) src/stt/whisper.rs:373

medium process_spawn build_script 1

std::process::Command::new build.rs:14

medium yara_match invisible_characters library 1

Zero width or invisible characters, which can hide identifiers or payloads webui/build/client/assets/Tab-B8UKab4A.js:204

low network_access library 723

low process_spawn library 7

tokio::process::Command::new src/agents/mcp/mod.rs:376
std::process::Command::new src/agents/shell/local/mod.rs:24 src/agents/tools/skill/execute_skill_resource.rs:87 src/skill/install.rs:11 src/skill/install.rs:83 src/skill/install.rs:96 src/skill/install.rs:151

low build_script build_script 1

build.rs build.rs

info url_literal library 150

# BOOT.md - Operating Doctrine\u{a}\u{a}You are {name}, {description}, running on [Vizier](https://vizier.rs) v{version}.\u{a}\u{a}## Time\u{a}\u{a}The `# Context` block in each message gives the syst… src/agents/agent/system_prompt/boot.rs:3
https://api.search.brave.com/res/v1/web/search src/agents/tools/brave_search/mod.rs:76
https://chatgpt.com/backend-api/codex src/catalogue/builtin.rs:39
http://localhost:11434 src/catalogue/builtin.rs:52 src/llm/media/mod.rs:38 src/llm/resolve.rs:883
http://localhost:8080 src/catalogue/builtin.rs:61
http://127.0.0.1:9998/v1 src/catalogue/builtin.rs:79 src/channels/http/api/v1/providers/mod.rs:579 src/llm/resolve.rs:888 src/provider_keys.rs:219 src/provider_keys.rs:222
https://api.voyageai.com/v1 src/catalogue/builtin.rs:97 src/llm/media/mod.rs:35
https://api.openai.com/v1 src/catalogue/data.rs:387 src/catalogue/data.rs:509 src/llm/media/mod.rs:26
https://api.anthropic.com/v1 src/catalogue/data.rs:388 src/llm/dialect/anthropic.rs:297 src/llm/resolve.rs:672
https://generativelanguage.googleapis.com/v1beta src/catalogue/data.rs:389 src/llm/media/mod.rs:29
https://api.groq.com/openai/v1 src/catalogue/data.rs:390 src/llm/media/mod.rs:27
https://api.mistral.ai/v1 src/catalogue/data.rs:391 src/llm/media/mod.rs:28
https://api.x.ai/v1 src/catalogue/data.rs:392 src/llm/media/mod.rs:32
https://api.together.xyz/v1 src/catalogue/data.rs:393 src/llm/media/mod.rs:34
https://api.perplexity.ai src/catalogue/data.rs:394
https://api.cerebras.ai/v1 src/catalogue/data.rs:395
https://api.deepinfra.com/v1/openai src/catalogue/data.rs:396
https://api.cohere.ai/compatibility/v1 src/catalogue/data.rs:397
{\u{a} "acme": {"id": "acme", "name": "Acme", "env": ["ACME_API_KEY"], "npm": "@ai-sdk/openai-compatible",\u{a} "api": "https://api.acme.test/v1", "unknown_field": 1,\u{a} … src/catalogue/data.rs:421
https://api.acme.test/anthropic/v1 src/catalogue/data.rs:469
https://api.acme.test/v1 src/catalogue/data.rs:474
https://console.aws.amazon.com/iam/home#/users src/catalogue/guide.rs:98
https://console.aws.amazon.com/bedrock/home#/modelaccess src/catalogue/guide.rs:102
https://docs.aws.amazon.com/bedrock/latest/userguide/models-supported.html src/catalogue/guide.rs:106
https://www.vizier.rs/docs/configuration/providers#amazon-bedrock src/catalogue/guide.rs:110
https://openrouter.ai/api/v1/models?output_modalities=speech src/catalogue/media.rs:69
https://openrouter.ai/api/v1/models?output_modalities=transcription src/catalogue/media.rs:70
https://openrouter.ai/api/v1/images/models src/catalogue/media.rs:71
http://x/v1 src/catalogue/mod.rs:319
{}://{}/logos/{id}.svg src/catalogue/refresh.rs:319
{"a": {"id": "a", "npm": "@ai-sdk/openai-compatible", "api": "https://a"}, "b": {"id": "b", "npm": "@ai-sdk/openai-compatible", "api": "https://b"}, "c": {"id": "c", "npm": "@ai-sdk/openai-compatible"… src/catalogue/refresh.rs:400
{"b": {"id": "b", "npm": "@ai-sdk/openai-compatible", "api": "https://b"}} src/catalogue/refresh.rs:405
{"a": {"id": "a", "npm": "@ai-sdk/openai-compatible", "api": "https://a"}, "c": {"id": "c", "npm": "@ai-sdk/openai-compatible", "api": "https://c"}} src/catalogue/refresh.rs:407
https://models.dev/api.json src/catalogue/seed.rs:36 src/config/mod.rs:118
http://h/v1 src/channels/http/api/v1/providers/custom.rs:484 src/channels/http/api/v1/providers/custom.rs:501
http://h/v1/ src/channels/http/api/v1/providers/custom.rs:494
http://127.0.0.1:19998/v1 src/channels/http/api/v1/providers/mod.rs:586 src/channels/http/api/v1/providers/mod.rs:592 src/channels/http/api/v1/providers/mod.rs:596 src/channels/http/api/v1/providers/mod.rs:599
https://elsewhere.example src/channels/http/api/v1/providers/mod.rs:734
https://api.telegram.org/file/bot{}/{} src/channels/telegram/mod.rs:274 src/channels/telegram/mod.rs:296
\u{a}### Onboarding complete!\u{a}\u{a}Configuration saved to `{}`\u{a}\u{a}| | |\u{a}|---|---|\u{a}| **Start server** | `vizier run` |\u{a}| **WebUI** | `http://localhost:{}` |\u{a}\u{a}Open the WebU… src/cli/onboard.rs:115
https://endpoint.example src/encryption/fields.rs:523 src/encryption/fields.rs:651 src/encryption/storage_tests.rs:354 src/storage/sqlite/provider.rs:182 src/storage/sqlite/provider.rs:186
https://base.example/v1 src/encryption/fields.rs:524 src/encryption/fields.rs:655 src/storage/sqlite/provider.rs:181
https://acme.invalid/v1 src/encryption/fields.rs:543 src/encryption/storage_tests.rs:417 src/storage/sqlite/provider.rs:209 src/storage/sqlite/provider.rs:224
\u{a} INSERT INTO agent_secret (agent_id, name, value, created_at, updated_at, updated_by)\u{a} VALUES ('dp-a', 'AGENT_TOKEN', 'agent-token-abc123', 'now', 'now', '"admin"');… src/encryption/migrate.rs:345
https://api.githubcopilot.com src/llm/auth.rs:216
https://api.github.com/copilot_internal/v2/token src/llm/auth.rs:217
:// src/llm/auth.rs:375
https://{proxy_ep} src/llm/auth.rs:378
https://{api_host} src/llm/auth.rs:398
https://api.openai.com/auth src/llm/auth.rs:468
https://api.individual.githubcopilot.com src/llm/auth.rs:490 src/llm/auth.rs:497
tid=1;proxy-ep=https://proxy.individual.githubcopilot.com;exp=2 src/llm/auth.rs:494
tid=1;proxy-ep=http://proxy.individual.githubcopilot.com;exp=2 src/llm/auth.rs:502
tid=1;proxy-ep=https://evil.example.com;exp=2 src/llm/auth.rs:507
tid=1;proxy-ep=https://proxy.individual.githubcopilot.com/base;exp=2 src/llm/auth.rs:512
https://bedrock-runtime.us-east-1.amazonaws.com/model/amazon.nova-lite-v1%3A0/converse src/llm/auth.rs:541
https://bedrock-runtime.{region}.amazonaws.com src/llm/bedrock.rs:39
https://bedrock.{region}.amazonaws.com src/llm/bedrock.rs:44
https://{control_host} src/llm/bedrock.rs:62
https://bedrock-runtime.us-east-1.amazonaws.com src/llm/bedrock.rs:179 src/llm/bedrock.rs:190 src/llm/dialect/bedrock.rs:300 src/llm/resolve.rs:771 src/llm/resolve.rs:787
https://bedrock.eu-west-1.amazonaws.com src/llm/bedrock.rs:183
https://bedrock-runtime.us-gov-west-1.amazonaws.com src/llm/bedrock.rs:187
https://bedrock.us-east-1.amazonaws.com src/llm/bedrock.rs:192
https://api.anthropic.com src/llm/dialect/anthropic.rs:433
https://x/v1beta/models?key=AIzaSECRET&alt=json src/llm/http.rs:176
https://x/v1beta/models?key=[redacted]&alt=json src/llm/http.rs:177
https://api.cohere.ai/v1 src/llm/media/cohere.rs:10
http://{} src/llm/media/golden_tests.rs:91 src/llm/transport_tests.rs:72
https://router.huggingface.co/hf-inference/models src/llm/media/huggingface.rs:12
https://api.hyperbolic.xyz/v1 src/llm/media/hyperbolic.rs:12
https://openrouter.ai/api/v1 src/llm/media/mod.rs:31
http://127.0.0.1:1 src/llm/resolve.rs:77
https://${AZURE_RESOURCE_NAME}.openai.azure.com src/llm/resolve.rs:345
https://r.test/anthropic/v1 src/llm/resolve.rs:682
https://myres.openai.azure.com/ src/llm/resolve.rs:690
https://myres.openai.azure.com/openai/deployments/gpt-4o src/llm/resolve.rs:694
https://${X}.test src/llm/resolve.rs:696
https://abc.test src/llm/resolve.rs:696
https://${VZT_SURELY_UNSET}.test src/llm/resolve.rs:697
https://bedrock-runtime.ap-southeast-2.amazonaws.com src/llm/resolve.rs:813
https://bedrock-runtime.eu-west-1.amazonaws.com src/llm/resolve.rs:819
https://bedrock-runtime.us-west-2.amazonaws.com src/llm/resolve.rs:827
http://localhost:8080/v1 src/llm/resolve.rs:885
http://configured.test/v1 src/llm/resolve.rs:890 src/llm/resolve.rs:894
http://env.test/v1 src/llm/resolve.rs:908 src/llm/resolve.rs:915
http://10.0.0.5/v1 src/llm/resolve.rs:926
http://127.0.0.1:{port} src/llm/transport_tests.rs:149
https://opencode.ai/zen/v1 src/provider_migration.rs:39
https://opencode.ai/zen/go/v1 src/provider_migration.rs:40
https://api.moonshot.ai/v1 src/provider_migration.rs:41
https://api.z.ai/api/paas/v4 src/provider_migration.rs:42
https://api.minimax.io/v1 src/provider_migration.rs:43
http://gpu:11434 src/provider_migration.rs:495
https://r.openai.azure.com src/provider_migration.rs:497
https://proxy.example/go/v1 src/provider_migration.rs:501
http://127.0.0.1:18080/v1 src/provider_migration.rs:504
https://github.com/vizier-lab/vizier.git src/skill/install.rs:8
git is not working properly. Please install git: https://git-scm.com/downloads src/skill/install.rs:17
git is required for skill installation. Install git: https://git-scm.com/downloads src/skill/install.rs:22
http:// src/skill/install.rs:28 src/skill/install.rs:31
https:// src/skill/install.rs:28 src/skill/install.rs:31
https://github.com/{}.git src/skill/install.rs:34
https://a/b src/skill/invocation.rs:174
see [screenshot](notes.png) and [site](https://example.com/page) and [mail](mailto:a@b.com) src/storage/memory_bundle.rs:2878
http://x src/storage/sqlite/integration.rs:613
https://api.elevenlabs.io/v1/speech-to-text src/stt/elevenlabs.rs:40
https://huggingface.co/ggerganov/whisper.cpp/resolve/main src/stt/whisper.rs:12
https://api.elevenlabs.io/v1/text-to-speech/{} src/tts/elevenlabs.rs:27
https://huggingface.co/{}/resolve/main/{file}?download=true src/tts/kokoro.rs:134

info unsafe_code library 3

7 unsafe blocks, functions or impls src/llm/resolve.rs:742
6 unsafe blocks, functions or impls src/provider_keys.rs:194
1 unsafe blocks, functions or impls src/storage/sqlite/mod.rs:175

Run: check

failed

Ended: agent reported the end
Guest: exit code 101
Run time: 654 ms
VM restore: 69 ms
Payload: 45812 files, 942.4 MiB
Missing packages: kanaria 0.2.0
Files opened: 1936

Processes 1

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	4 ms	641 ms	25856

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 6
Directories: 12
Size: 624 B
Compiled units: 0

Nothing outside the build areas.

Output

Standard error

error: no matching package named `kanaria` found
location searched: directory source `/cw/vendor` (which is replacing registry `crates-io`)
required by package `lindera v2.3.4`
    ... which satisfies dependency `lindera = "^2.3.4"` (locked to 2.3.4) of package `any-tts v0.2.0`
    ... which satisfies dependency `any-tts = "^0.2.0"` (locked to 0.2.0) of package `vizier v0.13.5`
    ... which satisfies dependency `target = "=0.13.5"` (locked to 0.13.5) of package `crateward-probe v0.0.0 (/cw/probe)`
note: offline mode (via `--offline`) can sometimes cause surprising resolution failures
help: if this error is too confusing you may wish to retry without `--offline`

Timeline

When	From	To	Event	Worker
2026-10-29 07:48 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-29 07:48 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-29 07:48 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot2
2026-10-29 07:49 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot2
2026-10-29 07:49 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-29 07:49 UTC	Scored	Done	finalized	analyzer-12816