omarchy-plugin-check independent community review · not affiliated with omarchy
caution

AI Usage

akitaonrails.ai-usagebar · Widgets · bar widget · akitaonrails/ai-usagebar · ↗ marketplace
caution combined · worst of core + verified (1 trusted, 1 counted)
opc opc: caution reviewed b1766cb upstream ad28ba6
providertiersigverdict riskcounts ascriteria commit · treewhen
core sig caution 16 caution safe-to-run : not checked no-net : passed no-exec : failed no-persist : passed no-priv : passed no-obfusc : passed no-secrets : passed human : not checked b1766cb 619530c 2026-10-02

verdict

opc · core
caution 16/100 risk

caution: score 16; 1 medium, 12 low; uses processExec, externalCode

reasons
capabilities: processExec · relies on external code not in the reviewed commit, so safe-to-run is not checked: ai-usagebar (binary, aur), ai-usagebar (system-package, aur), ai-usagebar-bin (system-package, aur), aes (package, cargo), base64 (package, cargo), cbc (package, cargo) +20 more
criteria
safe-to-run : not checked no-net : passed no-exec : failed no-persist : passed no-priv : passed no-obfusc : passed no-secrets : passed human : not checked
ai
no escalation
guard
canary control n/a tools schema

does

purpose
Bar widget that periodically runs the external ai-usagebar CLI for JSON usage and shows it in a panel, with settings that pipe API keys to the CLI.
kinds
bar-widget
entry
barWidget → omarchy/BarWidget.qml
manifest
valid
scope
repository root · marketplace-listing

caps

level · evidence
exec spawns processes exec · omarchy/Panel.qml:204exec · omarchy/SettingsView.qml:139exec · omarchy/SettingsView.qml:158exec · gnome-extension/prefs.js:77exec · gnome-extension/prefs.js:78exec · gnome-extension/prefs.js:79 +2
net reaches the network
write writes outside its dir
persist survives restart
priv sudo / pkexec / polkit
pkg installs packages
bin ships binaries
clip reads/writes clipboard
screen captures screen
hypr controls the compositor
ext runs code it does not ship external-code · omarchy/Panel.qml:207external-code · Cargo.toml

areas

1 of 10 touched
shell touched
hypr not touched
systemd not touched
pacman not touched
sudoers not touched
rc not touched
ssh not touched
browsers not touched
gpg not touched
dbus not touched

net

29 hosts
hostschemeevidence
127.0.0.1 http network · src/anthropic/fetch.rs:616network · src/antigravity/fetch.rs:403network · src/kiro/fetch.rs:750
api.anthropic.com https network · src/anthropic/desktop_creds.rs:363network · src/anthropic/fetch.rs:17network · src/anthropic/mod.rs:2network · src/anthropic_api/fetch.rs:20
api.deepseek.com https network · src/deepseek/fetch.rs:11
api.kilo.ai https network · src/kilo/fetch.rs:15
api.kimi.com https network · src/kimi/fetch.rs:13
api.minimax.io https network · src/minimax/fetch.rs:19
api.minimaxi.com https network · src/minimax/fetch.rs:20
api.moonshot.ai https network · src/moonshot/fetch.rs:15
api.moonshot.cn https network · src/moonshot/fetch.rs:16
api.novita.ai https network · src/novita/fetch.rs:14
api.openai.com https network · src/openai/creds.rs:80network · src/openai/fetch.rs:262
api.z.ai https network · src/zai/fetch.rs:13network · src/zai/types.rs:2
auth.openai.com https network · src/openai/oauth.rs:1
chatgpt.com https network · src/openai/fetch.rs:18network · src/openai/types.rs:1
codewhisperer.us-east-1.amazonaws.com https network · src/kiro/types.rs:6
cursor.com https network · src/cursor/fetch.rs:18
docs.aws.amazon.com https network · src/kiro/oauth.rs:3
docs.x.ai https network · src/grok/types.rs:4
github.com https network · Cargo.toml:9network · config.example.toml:60network · gnome-extension/metadata.json:4network · src/claude_desktop/capture.rs:16network · src/claude_desktop/mod.rs:10network · src/config.rs:181
idp-a.test https network · src/supergrok/scope.rs:220
idp-b.test https network · src/supergrok/scope.rs:224
localhost http network · src/anthropic/fetch.rs:436network · src/kimi/fetch.rs:540
management-api.x.ai https network · src/grok/fetch.rs:15
novita.ai https network · src/novita/types.rs:4
oidc.us-east-1.amazonaws.com https network · src/kiro/oauth.rs:171
oidc.us-gov-west-1.amazonaws.com https network · src/kiro/oauth.rs:175
openrouter.ai https network · src/openrouter/fetch.rs:12
platform.claude.com https network · config.example.toml:77network · src/anthropic/oauth.rs:1network · src/anthropic_api/types.rs:5
www.apple.com http network · macos/install-agent.sh:31

deps

0 vulns · 27 pkgs · 26 external
packageversionecodirectpinnedmanifest
tokio 1 cargo yes yes Cargo.toml
reqwest 0.12 cargo yes yes Cargo.toml
serde 1 cargo yes yes Cargo.toml
serde_json 1 cargo yes yes Cargo.toml
toml 0.8 cargo yes yes Cargo.toml
toml_edit 0.25 cargo yes yes Cargo.toml
clap 4 cargo yes yes Cargo.toml
chrono 0.4 cargo yes yes Cargo.toml
fs2 0.4 cargo yes yes Cargo.toml
tempfile 3 cargo yes yes Cargo.toml
directories 6 cargo yes yes Cargo.toml
thiserror 2 cargo yes yes Cargo.toml
ctrlc 3 cargo yes yes Cargo.toml
base64 0.23 cargo yes yes Cargo.toml
aes 0.8 cargo yes yes Cargo.toml
cbc 0.1 cargo yes yes Cargo.toml
pbkdf2 0.13 cargo yes yes Cargo.toml
sha1 0.11 cargo yes yes Cargo.toml
sha2 0.10 cargo yes yes Cargo.toml
ratatui 0.30.1 cargo yes yes Cargo.toml
ratatui-bubbletea-components 0.2 cargo yes yes Cargo.toml
ratatui-bubbletea-theme 0.2 cargo yes yes Cargo.toml
rusqlite 0.39 cargo yes yes Cargo.toml
mockito 1 cargo yes yes Cargo.toml
insta 1 cargo yes yes Cargo.toml
pretty_assertions 1 cargo yes yes Cargo.toml
tempfile 3 cargo yes yes Cargo.toml
system ai-usagebar ai-usagebar-bin
external ai-usagebarai-usagebarai-usagebar-binaesbase64cbcchronoclapctrlcdirectoriesfs2pbkdf2ratatuiratatui-bubbletea-componentsratatui-bubbletea-themereqwestrusqliteserdeserde_jsonsha1sha2tempfilethiserrortokiotomltoml_edit

secrets

1
generic-api-key

supply

scorecardn/aunavailable
pinnedyes
signed40%commits
bus factor1
age131drepo age
unpinned fetch0remote code

inject

hidden unicode0
prompt injection0
obfuscation0

quality

loc49,709
lint errors4shellcheck · eslint · qmllint
lint warnings1,217
tests5files
docsreadme changelog
licenseMIT
Rust 42,796 · 113 files Swift 3,209 · 2 files JavaScript 1,657 · 6 files QML 1,082 · 3 files YAML 411 · 3 files TOML 335 · 2 files Shell 160 · 5 files Makefile 33 · 1 files
hotspots
omarchy/Panel.qml .github/workflows/release.yml Cargo.toml gnome-extension/prefs.js macos/ai-usagebar-menubar.swift macos/install-agent.sh src/anthropic/keychain.rs src/cache.rs

perf

spawns/min0estimated
timers2
keep loadedyesalways resident
large assets13759 KB
timerintervalrepeatspawns
omarchy/Panel.qml:189 runtime yes —
omarchy/Panel.qml:197 30 s yes —

activity

github
commits 90d265
contributors23
open issues0
releasev1.4.0
last commit2026-08-14
archivedn/a

diff

first review · nothing to diff

findings

14 above info · 274 info · 0 hard
medium external-code omarchy/Panel.qml:207 extcode · 80%
Runs 'ai-usagebar', which is not in the repository or the Omarchy base install: its code was not reviewed (installed separately, e.g. from the AUR).
command: ["ai-usagebar", "usage", "--json"]
ai confirmed
low supply-chain .github/workflows/release.yml:3 zizmor · 50%
runtime artifacts potentially vulnerable to a cache poisoning attack (https://docs.zizmor.sh/audits/#cache-poisoning)
on:   push:     tags: ["v*"]   workflow_dispatch:     inputs:       ref:         description: "Existing release tag to build (e.g. v0.13.1)"         required: true         default: ""
ai: unsure
low external-code Cargo.toml extcode · 90%
Declares 23 runtime dependencies fetched from a package registry at install/build time (not reviewed): aes, base64, cbc, chrono, clap, ctrlc, directories, fs2 …
low exec gnome-extension/prefs.js:112 opengrep · 70%
Shell command string built by concatenation inside `sh -c` — command injection if any part is untrusted (network data, file names, user input).
['bash', '-lc', `command -v ${cli}`],
ai confirmed
low other macos/ai-usagebar-menubar.swift malcontent · 60%
Looks up a password from the Keychain [HIGH]
['find-generic-password']
low other macos/install-agent.sh malcontent · 60%
sets up an embedded LaunchAgent and launches it [HIGH]
['HOME/Library/LaunchAgents/$LABEL.plist', '<key>ProgramArguments</key>', 'launchctl load']
low secret omarchy/SettingsView.qml:161 ai · 60%
Settings apply passes API keys to the external ai-usagebar CLI, which is not reviewed.
command: ["ai-usagebar", "settings", "apply"]
ai: unsure
low other src/anthropic/keychain.rs malcontent · 60%
Looks up a password from the Keychain [HIGH]
['find-generic-password']
low other src/cache.rs malcontent · 60%
payload path [HIGH]
['yload_refuses_a_payload_older_than_the_', 'fallback_payload_refuses_a_paylo', 'maybe_payload_returns_none_wh', 'fresh_payload_respects_ttl', 'write_payload', 'payload_path', 'read_payload', 'payload
low other src/kimi/fetch.rs malcontent · 60%
payload path [HIGH]
['fallback_payload', 'fresh_payload', 'write_payload', 'payload_path', 'payload_age']
low secret src/kiro/db.rs:400 gitleaks · 70%
Possible hard-coded secret (Detected a Generic API Key, potentially exposing access to various services and sensitive operations.); value redacted, liveness not verified.
one.account_key, "RED…REDACTED"
ai: likely false positive
low other src/minimax/fetch.rs malcontent · 60%
payload path [HIGH]
['fallback_payload', 'fresh_payload', 'write_payload', 'payload_path', 'payload_age']
low other src/safe_storage.rs malcontent · 60%
Looks up a password from the Keychain [HIGH]
['find-generic-password']
low other src/supergrok/fetch.rs malcontent · 60%
payload path [HIGH]
['fallback_payload', 'fresh_payload', 'write_payload', 'payload_path', 'payload_age']
274 info findings
info supply-chain .github/dependabot.yml:3 zizmor · 90%
insufficient cooldown in Dependabot updates (https://docs.zizmor.sh/audits/#dependabot-cooldown)
info supply-chain .github/dependabot.yml:8 zizmor · 90%
insufficient cooldown in Dependabot updates (https://docs.zizmor.sh/audits/#dependabot-cooldown)
info supply-chain .github/workflows/ci.yml:26 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info supply-chain .github/workflows/ci.yml:53 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info supply-chain .github/workflows/ci.yml:70 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info supply-chain .github/workflows/ci.yml:92 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info supply-chain .github/workflows/release.yml:26 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info supply-chain .github/workflows/release.yml:100 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info privilege .github/workflows/release.yml:117 opengrep · 90%
Runs commands as root via sudo/doas/run0.
info supply-chain .github/workflows/release.yml:162 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info other .github/workflows/release.yml:206 opengrep · 90%
Uses pacman / AUR helpers.
info package .github/workflows/release.yml:206 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info package .github/workflows/release.yml:206 textscan · 100%
System package referenced for install: ai-usagebar-bin (aur)
info other .github/workflows/release.yml:207 opengrep · 90%
Uses pacman / AUR helpers.
info package .github/workflows/release.yml:207 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info package .github/workflows/release.yml:207 textscan · 100%
System package referenced for install: ai-usagebar (aur)
info network .github/workflows/release.yml:213 opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
info supply-chain .github/workflows/release.yml:252 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info supply-chain .github/workflows/release.yml:257 zizmor · 90%
prefer trusted publishing for authentication (https://docs.zizmor.sh/audits/#use-trusted-publishing)
info supply-chain .github/workflows/release.yml:287 zizmor · 50%
credential persistence through GitHub Actions artifacts (https://docs.zizmor.sh/audits/#artipacked)
info network .github/workflows/release.yml:304 opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
info other .github/workflows/release.yml:314 opengrep · 90%
Uses pacman / AUR helpers.
info other .github/workflows/release.yml:333 opengrep · 90%
Uses pacman / AUR helpers.
info other .gitignore:18 opengrep · 90%
Uses pacman / AUR helpers.
info network Cargo.toml:9 textscan · 100%
URL literal: https://github.com
info other CHANGELOG.md:34 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info package CHANGELOG.md:83 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info other CHANGELOG.md:1179 opengrep · 90%
Uses pacman / AUR helpers.
info package CHANGELOG.md:1211 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info other CHANGELOG.md:1218 opengrep · 90%
Uses pacman / AUR helpers.
info other CHANGELOG.md:1310 opengrep · 90%
Uses pacman / AUR helpers.
info package CHANGELOG.md:1310 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info package CHANGELOG.md:1310 textscan · 100%
System package referenced for install: ai-usagebar-bin (aur)
info other CHANGELOG.md:1362 opengrep · 90%
Uses pacman / AUR helpers.
info other CLAUDE.md:24 opengrep · 90%
Uses pacman / AUR helpers.
info other CLAUDE.md:25 opengrep · 90%
Uses pacman / AUR helpers.
info other CLAUDE.md:27 opengrep · 90%
Uses pacman / AUR helpers.
info other CLAUDE.md:37 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info network CLAUDE.md:60 opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
info network CLAUDE.md:63 opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
info network CLAUDE.md:65 opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
info other CLAUDE.md:105 opengrep · 90%
Uses pacman / AUR helpers.
info network CLAUDE.md:141 opengrep · 90%
Network client invoked from a script or Process command (curl/wget/nc/...).
info network config.example.toml:60 textscan · 100%
URL literal: https://github.com
info network config.example.toml:77 textscan · 100%
URL literal: https://platform.claude.com
info other gnome-extension/extension.js malcontent · 60%
references and possibly executes relative path [MEDIUM]
info other gnome-extension/install.sh malcontent · 60%
Forcibly deletes files recursively [MEDIUM]
info other gnome-extension/install.sh:31 opengrep · 90%
Uses systemd tooling.
info performance gnome-extension/install.sh:31 perf · 100%
Long-running follower/event stream process.
info other gnome-extension/marker-logic.test.mjs malcontent · 60%
references and possibly executes relative path [MEDIUM]
info exec gnome-extension/marker-logic.test.mjs:115 eslint · 60%
Generic Object Injection Sink
info network gnome-extension/metadata.json:4 textscan · 100%
URL literal: https://github.com
info other gnome-extension/prefs.js malcontent · 60%
executes shell [MEDIUM]
info other gnome-extension/prefs.js malcontent · 60%
Runs shell commands but throws output away [MEDIUM]
info other gnome-extension/prefs.js malcontent · 60%
calls sudo [MEDIUM]
info exec gnome-extension/prefs.js:77 opengrep · 90%
Runs a shell command string via `sh -c`.
info exec gnome-extension/prefs.js:78 opengrep · 90%
Runs a shell command string via `sh -c`.
info exec gnome-extension/prefs.js:79 opengrep · 90%
Runs a shell command string via `sh -c`.
info exec gnome-extension/prefs.js:112 opengrep · 90%
Runs a shell command string via `sh -c`.
info package gnome-extension/README.md:34 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info other macos/ai-usagebar-menubar.swift malcontent · 60%
execute external program [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
runs osascript [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
executes shell [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
Runs shell commands but throws output away [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
references and possibly executes relative path [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
path reference within /usr/local/bin [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
references an 'agent' [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
sets up a LaunchAgent and launches it [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
calls sudo [MEDIUM]
info other macos/ai-usagebar-menubar.swift malcontent · 60%
References interception [MEDIUM]
info filesystem macos/ai-usagebar-tests.swift:632 opengrep · 90%
Recursive delete of the home directory or a top-level config tree.
info filesystem macos/ai-usagebar-tests.swift:633 opengrep · 90%
Recursive delete of the home directory or a top-level config tree.
info filesystem macos/ai-usagebar-tests.swift:634 opengrep · 90%
Recursive delete of the home directory or a top-level config tree.
info other macos/build.sh malcontent · 60%
references an 'agent' [MEDIUM]
info network macos/install-agent.sh:31 textscan · 100%
URL literal: http://www.apple.com
info package macos/INSTALL.md:11 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info package macos/INSTALL.md:27 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info package macos/INSTALL.md:106 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info package macos/README.md:46 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info other macos/run-tests.sh malcontent · 60%
Forcibly deletes files recursively [MEDIUM]
info other macos/run-tests.sh malcontent · 60%
references and possibly executes relative path [MEDIUM]
info other omarchy/BarWidget.qml:44 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info exec omarchy/Model.js:67 eslint · 60%
Function Call Object Injection Sink
info exec omarchy/Model.js:80 eslint · 60%
Function Call Object Injection Sink
info exec omarchy/Model.js:104 eslint · 60%
Function Call Object Injection Sink
info exec omarchy/Model.js:139 eslint · 60%
Generic Object Injection Sink
info exec omarchy/Model.js:148 eslint · 60%
Generic Object Injection Sink
info exec omarchy/Model.js:150 eslint · 60%
Generic Object Injection Sink
info exec omarchy/Model.js:159 eslint · 60%
Variable Assigned to Object Injection Sink
info exec omarchy/Model.js:173 eslint · 60%
Variable Assigned to Object Injection Sink
info exec omarchy/Model.js:218 eslint · 60%
Unsafe Regular Expression
info exec omarchy/Model.js:247 eslint · 60%
Variable Assigned to Object Injection Sink
info exec omarchy/Model.js:255 eslint · 60%
Variable Assigned to Object Injection Sink
info exec omarchy/Model.js:272 eslint · 60%
Generic Object Injection Sink
info exec omarchy/Model.js:293 eslint · 60%
Generic Object Injection Sink
info exec omarchy/Model.js:299 eslint · 60%
Generic Object Injection Sink
info exec omarchy/Model.js:304 eslint · 60%
Generic Object Injection Sink
info other omarchy/model.test.mjs malcontent · 60%
references spoofing [MEDIUM]
info exec omarchy/model.test.mjs:5 eslint · 60%
Found readFileSync from package "node:fs" with non literal argument at index 0
info exec omarchy/model.test.mjs:13 eslint · 60%
Found readFileSync from package "node:fs" with non literal argument at index 0
info exec omarchy/model.test.mjs:17 eslint · 60%
Found readFileSync from package "node:fs" with non literal argument at index 0
info exec omarchy/model.test.mjs:20 eslint · 60%
Found non-literal argument to RegExp Constructor
info exec omarchy/model.test.mjs:26 eslint · 60%
Found readFileSync from package "node:fs" with non literal argument at index 0
info exec omarchy/model.test.mjs:33 eslint · 60%
Found readFileSync from package "node:fs" with non literal argument at index 0
info other omarchy/Panel.qml:128 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info exec omarchy/Panel.qml:204 opengrep · 90%
Quickshell Process — spawns external programs.
info other omarchy/README.md:18 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info package omarchy/README.md:18 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info package omarchy/README.md:18 textscan · 100%
System package referenced for install: ai-usagebar-bin (aur)
info other omarchy/README.md:19 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:22 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:28 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:29 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:39 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:40 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:64 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:88 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:89 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other omarchy/README.md:94 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info exec omarchy/SettingsView.qml:139 opengrep · 90%
Quickshell Process — spawns external programs.
info exec omarchy/SettingsView.qml:158 opengrep · 90%
Quickshell Process — spawns external programs.
info other packaging/aur/PKGBUILD-bin:26 opengrep · 90%
Uses pacman / AUR helpers.
info other README.md:15 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other README.md:41 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info package README.md:41 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info package README.md:41 textscan · 100%
System package referenced for install: ai-usagebar-bin (aur)
info other README.md:42 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other README.md:53 opengrep · 90%
Uses pacman / AUR helpers.
info package README.md:53 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info other README.md:54 opengrep · 90%
Uses pacman / AUR helpers.
info package README.md:54 opengrep · 90%
Installs system packages (pacman / AUR helper / omarchy pkg).
info package README.md:54 textscan · 100%
System package referenced for install: ai-usagebar (aur)
info other README.md:57 opengrep · 90%
Uses pacman / AUR helpers.
info package README.md:62 opengrep · 90%
Installs language packages at runtime (pip/npm/cargo/go/gem/bun).
info privilege README.md:72 opengrep · 90%
Runs commands as root via sudo/doas/run0.
info other README.md:347 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other README.md:348 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other README.md:704 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other README.md:712 opengrep · 90%
Dispatches Hyprland actions (controls windows/workspaces/keybinds).
info other README.md:712 opengrep · 90%
Talks to the Hyprland compositor (hyprctl / IPC socket / Quickshell.Hyprland).
info other README.md:714 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other README.md:714 opengrep · 90%
Talks to the Hyprland compositor (hyprctl / IPC socket / Quickshell.Hyprland).
info other README.md:927 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other src/account.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/account.rs malcontent · 60%
possible hidden file path [MEDIUM]
info other src/account.rs malcontent · 60%
execute external program [MEDIUM]
info other src/account.rs malcontent · 60%
may access cookies [MEDIUM]
info other src/account.rs malcontent · 60%
path reference within /tmp [MEDIUM]
info network src/anthropic_api/fetch.rs:20 textscan · 100%
URL literal: https://api.anthropic.com
info network src/anthropic_api/types.rs:5 textscan · 100%
URL literal: https://platform.claude.com
info other src/anthropic/cli_account.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/anthropic/cli_account.rs malcontent · 60%
references an unusual path within /tmp [MEDIUM]
info other src/anthropic/creds.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/anthropic/creds.rs malcontent · 60%
Looks up the Desktop directory for the current user [MEDIUM]
info other src/anthropic/creds.rs malcontent · 60%
execute external program [MEDIUM]
info other src/anthropic/desktop_creds.rs malcontent · 60%
contains a client ID [MEDIUM]
info other src/anthropic/desktop_creds.rs malcontent · 60%
accesses a keychain [MEDIUM]
info network src/anthropic/desktop_creds.rs:363 textscan · 100%
URL literal: https://api.anthropic.com
info other src/anthropic/fetch.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/anthropic/fetch.rs malcontent · 60%
upload content via HTTP form [MEDIUM]
info other src/anthropic/fetch.rs malcontent · 60%
submits content to websites [MEDIUM]
info network src/anthropic/fetch.rs:17 textscan · 100%
URL literal: https://api.anthropic.com
info network src/anthropic/fetch.rs:436 textscan · 100%
URL literal: http://localhost
info network src/anthropic/fetch.rs:616 textscan · 100%
URL literal: http://127.0.0.1
info other src/anthropic/keychain.rs malcontent · 60%
executes shell [MEDIUM]
info other src/anthropic/mod.rs malcontent · 60%
accesses a keychain [MEDIUM]
info network src/anthropic/mod.rs:2 textscan · 100%
URL literal: https://api.anthropic.com
info other src/anthropic/oauth.rs malcontent · 60%
contains a client ID [MEDIUM]
info other src/anthropic/oauth.rs malcontent · 60%
upload content via HTTP form [MEDIUM]
info other src/anthropic/oauth.rs malcontent · 60%
submits content to websites [MEDIUM]
info network src/anthropic/oauth.rs:1 textscan · 100%
URL literal: https://platform.claude.com
info other src/antigravity/fetch.rs malcontent · 60%
references multiple operating systems [MEDIUM]
info other src/antigravity/fetch.rs malcontent · 60%
Mentions SSHD [MEDIUM]
info other src/antigravity/fetch.rs malcontent · 60%
possible hidden file path [MEDIUM]
info other src/antigravity/fetch.rs malcontent · 60%
upload content via HTTP form [MEDIUM]
info other src/antigravity/fetch.rs malcontent · 60%
submits content to websites [MEDIUM]
info other src/antigravity/fetch.rs malcontent · 60%
connects to an arbitrary host:port [MEDIUM]
info other src/antigravity/fetch.rs malcontent · 60%
listen on a socket [MEDIUM]
info network src/antigravity/fetch.rs:403 textscan · 100%
URL literal: http://127.0.0.1
info other src/claude_desktop/app.rs malcontent · 60%
accesses LevelDB databases [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
Finds program in process table [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
runs osascript [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
can call /usr/bin/open and archiving tools [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
may access cookies [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
references hardcoded application path [MEDIUM]
info other src/claude_desktop/app.rs malcontent · 60%
modifies file permissions [MEDIUM]
info other src/claude_desktop/capture.rs malcontent · 60%
accesses LevelDB databases [MEDIUM]
info other src/claude_desktop/capture.rs malcontent · 60%
may access cookies [MEDIUM]
info network src/claude_desktop/capture.rs:16 textscan · 100%
URL literal: https://github.com
info other src/claude_desktop/merge.rs malcontent · 60%
path reference within /tmp [MEDIUM]
info other src/claude_desktop/mod.rs malcontent · 60%
accesses LevelDB databases [MEDIUM]
info other src/claude_desktop/mod.rs malcontent · 60%
may access cookies [MEDIUM]
info network src/claude_desktop/mod.rs:10 textscan · 100%
URL literal: https://github.com
info other src/config.rs malcontent · 60%
references multiple operating systems [MEDIUM]
info other src/config.rs malcontent · 60%
accesses SQLite databases [MEDIUM]
info other src/config.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/config.rs malcontent · 60%
possible hidden file path [MEDIUM]
info other src/config.rs malcontent · 60%
references /etc/hosts [MEDIUM]
info other src/config.rs malcontent · 60%
path reference within /tmp [MEDIUM]
info other src/config.rs malcontent · 60%
references path within /Users [MEDIUM]
info other src/config.rs malcontent · 60%
modifies file permissions [MEDIUM]
info other src/config.rs malcontent · 60%
references an 'agent' [MEDIUM]
info other src/config.rs malcontent · 60%
references spoofing [MEDIUM]
info network src/config.rs:181 textscan · 100%
URL literal: https://github.com
info other src/context/mod.rs malcontent · 60%
references an 'agent' [MEDIUM]
info other src/cursor/db.rs malcontent · 60%
calls base64 command to encode strings [MEDIUM]
info other src/cursor/db.rs malcontent · 60%
references an 'agent' [MEDIUM]
info other src/cursor/fetch.rs malcontent · 60%
references an 'agent' [MEDIUM]
info other src/cursor/fetch.rs malcontent · 60%
access HTTP resources using cookies [MEDIUM]
info other src/cursor/fetch.rs malcontent · 60%
pretends to be Chrome [MEDIUM]
info network src/cursor/fetch.rs:18 textscan · 100%
URL literal: https://cursor.com
info network src/deepseek/fetch.rs:11 textscan · 100%
URL literal: https://api.deepseek.com
info other src/display.rs malcontent · 60%
references spoofing [MEDIUM]
info other src/error.rs malcontent · 60%
initiate a connection on a socket [MEDIUM]
info network src/grok/fetch.rs:15 textscan · 100%
URL literal: https://management-api.x.ai
info network src/grok/types.rs:4 textscan · 100%
URL literal: https://docs.x.ai
info network src/kilo/fetch.rs:15 textscan · 100%
URL literal: https://api.kilo.ai
info network src/kimi/fetch.rs:13 textscan · 100%
URL literal: https://api.kimi.com
info network src/kimi/fetch.rs:540 textscan · 100%
URL literal: http://localhost
info other src/kiro/db.rs malcontent · 60%
contains a client ID [MEDIUM]
info other src/kiro/db.rs malcontent · 60%
accesses SQLite databases [MEDIUM]
info other src/kiro/fetch.rs malcontent · 60%
contains a client ID [MEDIUM]
info other src/kiro/fetch.rs malcontent · 60%
accesses SQLite databases [MEDIUM]
info other src/kiro/fetch.rs malcontent · 60%
submits content to websites [MEDIUM]
info network src/kiro/fetch.rs:750 textscan · 100%
URL literal: http://127.0.0.1
info other src/kiro/oauth.rs malcontent · 60%
contains a client ID [MEDIUM]
info other src/kiro/oauth.rs malcontent · 60%
upload content via HTTP form [MEDIUM]
info other src/kiro/oauth.rs malcontent · 60%
submits content to websites [MEDIUM]
info network src/kiro/oauth.rs:3 textscan · 100%
URL literal: https://docs.aws.amazon.com
info network src/kiro/oauth.rs:171 textscan · 100%
URL literal: https://oidc.us-east-1.amazonaws.com
info network src/kiro/oauth.rs:175 textscan · 100%
URL literal: https://oidc.us-gov-west-1.amazonaws.com
info network src/kiro/types.rs:6 textscan · 100%
URL literal: https://codewhisperer.us-east-1.amazonaws.com
info network src/minimax/fetch.rs:19 textscan · 100%
URL literal: https://api.minimax.io
info network src/minimax/fetch.rs:20 textscan · 100%
URL literal: https://api.minimaxi.com
info network src/moonshot/fetch.rs:15 textscan · 100%
URL literal: https://api.moonshot.ai
info network src/moonshot/fetch.rs:16 textscan · 100%
URL literal: https://api.moonshot.cn
info network src/novita/fetch.rs:14 textscan · 100%
URL literal: https://api.novita.ai
info network src/novita/types.rs:4 textscan · 100%
URL literal: https://novita.ai
info other src/openai/creds.rs malcontent · 60%
references multiple operating systems [MEDIUM]
info other src/openai/creds.rs malcontent · 60%
calls base64 command to encode strings [MEDIUM]
info network src/openai/creds.rs:80 textscan · 100%
URL literal: https://api.openai.com
info network src/openai/fetch.rs:18 textscan · 100%
URL literal: https://chatgpt.com
info network src/openai/fetch.rs:262 textscan · 100%
URL literal: https://api.openai.com
info other src/openai/oauth.rs malcontent · 60%
contains a client ID [MEDIUM]
info other src/openai/oauth.rs malcontent · 60%
upload content via HTTP form [MEDIUM]
info other src/openai/oauth.rs malcontent · 60%
submits content to websites [MEDIUM]
info network src/openai/oauth.rs:1 textscan · 100%
URL literal: https://auth.openai.com
info network src/openai/types.rs:1 textscan · 100%
URL literal: https://chatgpt.com
info network src/openrouter/fetch.rs:12 textscan · 100%
URL literal: https://openrouter.ai
info other src/openrouter/vendor.rs malcontent · 60%
references spoofing [MEDIUM]
info other src/safe_storage.rs malcontent · 60%
mentions 'ciphertext' [MEDIUM]
info other src/safe_storage.rs malcontent · 60%
encrypts data [MEDIUM]
info other src/safe_storage.rs malcontent · 60%
Uses OpenSSL [MEDIUM]
info other src/safe_storage.rs malcontent · 60%
Contains embedded base64 content [MEDIUM]
info other src/supergrok/acp.rs malcontent · 60%
references an 'agent' [MEDIUM]
info network src/supergrok/scope.rs:220 textscan · 100%
URL literal: https://idp-a.test
info network src/supergrok/scope.rs:224 textscan · 100%
URL literal: https://idp-b.test
info other src/theme.rs:5 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other src/theme.rs:157 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other src/tui/app.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/tui/app.rs malcontent · 60%
references an 'agent' [MEDIUM]
info other src/tui/app.rs:238 opengrep · 90%
Calls Omarchy commands or touches Omarchy shell state.
info other src/tui/settings.rs malcontent · 60%
modifies file permissions [MEDIUM]
info other src/widget/cli.rs malcontent · 60%
path reference within /tmp [MEDIUM]
info other src/widget/run.rs malcontent · 60%
accesses SQLite databases [MEDIUM]
info other src/widget/run.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other src/widget/run.rs malcontent · 60%
path reference within /tmp [MEDIUM]
info other src/widget/run.rs malcontent · 60%
references an 'agent' [MEDIUM]
info network src/zai/fetch.rs:13 textscan · 100%
URL literal: https://api.z.ai
info network src/zai/types.rs:2 textscan · 100%
URL literal: https://api.z.ai
info other tests/live.rs malcontent · 60%
accesses SQLite databases [MEDIUM]
info other tests/live.rs malcontent · 60%
accesses a keychain [MEDIUM]
info other tests/live.rs malcontent · 60%
references an 'agent' [MEDIUM]

ai

escalate-only
pass 1okcontext pack, read-only
turns4
cost$0.10
pass 25findings re-checked
modelsonnet+fable
escalateno

QML only runs fixed-argv external ai-usagebar CLI (usage, settings show/apply) and launches a TUI. No obfuscation or injection found. The Rust CLI wasn't reviewed in depth; it reads provider credentials by design.

escalate-only: the ai may add findings and raise one level; it never lowers a verdict and never clears a hard fail.