Callosium

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  desktop/build-desktop.mjs, line 55

  await fs.rm(payloadDir, { recursive: true, force: true });

  scripts/build-portable.mjs, line 139

  await fs.rm(p, { recursive: true, force: true });

  src/core/vault.ts, line 227

  await fs.rm(tmp, { force: true }).catch(() => {});

  Show more

  src/core/vault.ts, line 246

  await fs.rm(full, { force: true });

  src/dashboard/server.ts, line 1591

  await fs.unlink(src);

  src/dashboard/server.ts, line 2007

  const cleanup = () => { fs.rm(zipPath, { force: true }).catch(() => {}); };

  src/dashboard/server.ts, line 2013

  await fs.rm(zipPath, { force: true }).catch(() => {});

  src/dashboard/server.ts, line 2137

  await fs.rm(ACCOUNT_FILE, { force: true });

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address. can reach api.resend.com. The description does not name that host.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  backend/waitlist-embed.js, line 38

  const res = await fetch(url, {

  backend/supabase/functions/on-account-created/index.ts, line 156

  const res = await fetch(url, { method: 'POST', headers, body: body === undefined ? undefined : JSON.stringify(body) });

  backend/supabase/functions/on-signup/index.ts, line 85

  const res = await fetch('https://api.resend.com/emails', { metho

  Show more

  backend/supabase/functions/on-signup/index.ts, line 107

  const res = await fetch(url, { method:'POST', headers:auth, body: body === undefined ? undefined : JSON.stringify(body) });

  backend/supabase/functions/on-signup/index.ts, line 148

  await fetch('https://api.resend.com/emails', { method:'POST', headers:{ Authorization:`Bearer ${key}`, 'Content-Type':'application/json', 'Idempotency-Key':`alert-${email}` },

  backend/supabase/functions/opinly-webhook/index.ts, line 16

  // OPINLY_API_KEY as a Vercel env var) and swap the email below for a fetch() to a

  backend/supabase/functions/opinly-webhook/index.ts, line 92

  await fetch('https://api.resend.com/emails', {

  scripts/build-portable.mjs, line 123

  const res = await fetch(url);

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  desktop/src-tauri/src/lib.rs, line 100

  .env("CALLOSIUM_MODEL_DIR", model_cache_dir())

  desktop/src-tauri/src/lib.rs, line 102

  .env("CALLOSIUM_DESKTOP_TOKEN", token)

  desktop/src-tauri/src/lib.rs, line 105

  .env("CALLOSIUM_DESKTOP", "1");

  Show more

  src/dashboard/auth.ts, line 43

  clientSecret: process.env.CALLOSIUM_GOOGLE_CLIENT_SECRET,

  src/dashboard/auth.ts, line 52

  clientSecret: process.env.CALLOSIUM_GITHUB_CLIENT_SECRET,

  src/dashboard/auth.ts, line 101

  if (process.env.CALLOSIUM_SESSION_SECRET) return process.env.CALLOSIUM_SESSION_SECRET;

  src/dashboard/server.ts, line 2328

  return res.end(JSON.stringify({ ok: true, token: process.env.CALLOSIUM_DESKTOP_TOKEN || '' }));

  src/entitlement/keygen.ts, line 37

  const accountId = process.env.CALLOSIUM_KEYGEN_ACCOUNT;

  src/entitlement/keygen.ts, line 39

  return { accountId, apiBase: process.env.CALLOSIUM_KEYGEN_API ?? 'https://api.keygen.sh/v1' };

  src/recall/engine.ts, line 1818

  // blank - an empty line in a .env, a `set VAR=` on Windows - would silently drop

  .gitignore, line 3

  *.log

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Concern

  contains a minified payload. contains an encoded blob in a file that should be readable.

  OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD

  desktop/src-tauri/icons/icon.icns, line 1

  icnsR�ic11-�PNG

  src/dashboard/ui.html, line 1

  <!DOCTYPE html>

  src/dashboard/screens/render-onboard.js, line 328

  const prov=(id,label)=> '<button data-ob-oauth="'+id+'" style="display:flex;align-items:center;justify-content:center;gap:11px;width:100%;font-family:var(--sans);font-weight:600;fo

  Show more

  src/dashboard/assets/cursors/cursors.css, line 4

  --cu-pointer1:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAABCElEQVR42u2WMQ6CMBSGX/8wgSMHYGD1Fm4k6mE4BpfwBmLiSUycGDwAI7DiYpMGi7T0URz4N0pf3tf/L6UiCuOePmq

  src/dashboard/assets/cursors/cursors.css, line 5

  --cu-pointer2:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAABT0lEQVR42u2aMQ6CMBSGH8YJHTmAA6snMVEPwzE8jJp4ElcHD+CIrjg9ogRSIEBL+/2bEmtDv/7/e4VoFSeF1Oj9eUU

  src/dashboard/assets/cursors/cursors.css, line 6

  --cu-link1:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAABYElEQVR42u1XMY6DMBBcIze0tHGRPCAdEkXyg5OSdPCX1FT5iOkukfIDKJDS3QNIAa3blElFZFsGbG4R0elGQtYC0o5nPW

  src/dashboard/assets/cursors/cursors.css, line 7

  --cu-link2:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAABrElEQVR42u2aMW7CMBiFXxALa1cY4ADdkBjaG1Si2eAunTtxEbq1lXqDMiCxcQAYmpWVsR2qP6pcjGNiu3b93hYZIpL38f

  src/dashboard/assets/cursors/cursors.css, line 8

  --cu-ibeam1:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAgUlEQVR42mNgGAUDDBiJUcTNJfKfHMO/fntD0HwWYg1zubaQJMv3aMUTpY5poKOAacimAZdrCxnO2FQzMDAwMJgcacUa5

  src/dashboard/assets/cursors/cursors.css, line 9

  --cu-ibeam2:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAAxElEQVR42u3bIQ6DQBAF0C2pKpZToCsre48eBN2D9B5IJJpTYKltVUUVIZ1uSPZ9iZhsHpNlxJCSiIiUm0NUofrUvHIef

  src/dashboard/assets/cursors/cursors.css, line 10

  --cu-ibeamtext1:url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAdElEQVR42mNgGAUDDBiJUcTNJfKfHMO/fntD0HwWYg1zubaQJMv3aMUTpY5poKOAacimAfQowRbkVEsD6AbhSpTEW

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 494c10324e7a. can delete files. can reach a host that is not written as a fixed address. can reach api.resend.com. The description does not name that host. reads a credential or environment file. contains a minified payload. contains an encoded blob in a file that should be readable.

Date and source

Date checked: 22 Oct 2026

Read how this letter is chosen