com.anots/directory

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  src/gateway/BifrostProcessManager.ts, line 58

  try { fs.unlinkSync(this.configFilePath); } catch { /* ignore */ }

  src/memory/ActiveStreamService.ts, line 176

  await fs.unlink(filePath).catch(() => {}); // Ignore if doesn't exist

  src/resilience/HealthMonitor.ts, line 164

  await fs.unlink(testFile);

  Show more

  .kiro/specs/anots-gateway/tasks.md, line 156

  - `start()`: write Bifrost config JSON to temp file, `child_process.spawn` the binary, poll `GET http://localhost:{port}/health` up to 5,000ms

  .kiro/specs/anots-gateway/tasks.md, line 169

  - Mock `child_process.spawn`; verify config file written to temp dir

  .kiro/specs/anots-gateway/tasks.md, line 223

  - No real Bifrost binary required for tests - mock `child_process.spawn`

• Install and update

  Serious

  install fetches a script from the network.

  INSTALL_REMOTE_SCRIPT

  docs/TCAM-RESEARCH-QWEN35.md, line 364

  curl -fsSL https://ollama.com/install.sh | sh

  package.json, line 32

  @langchain/community

  .kiro/specs/memory-system/design.md, line 1684

  curl -fsSL https://ollama.com/install.sh | sh

• Network

  Concern

  can reach api.z.ai. The description does not name that host. can reach openrouter.ai. The description does not name that host. can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  scripts/setup-qdrant.sh, line 46

  if curl -s http://localhost:6333/health > /dev/null 2>&1; then

  scripts/setup-qdrant.sh, line 53

  echo " curl http://localhost:6333/health"

  src/cli/axiom-assistant.ts, line 150

  const response = await fetch('http://localhost:11434/api/tags').catch(() => null);

  Show more

  src/cli/axiom-assistant.ts, line 156

  const response = await fetch('http://localhost:6379').catch(() => null);

  src/cli/axiom-assistant.ts, line 162

  const response = await fetch('http://localhost:6333/collections').catch(() => null);

  src/cli/axiom-assistant.ts, line 480

  const response = await fetch(`${answers.zaiBaseUrl || 'https://api.z.ai/api/coding/paas/v4'}/chat/completions`, {

  src/cli/axiom-assistant.ts, line 494

  const response = await fetch('https://openrouter.ai/api/v1/chat/completions', {

  src/cli/axiom-assistant.ts, line 508

  const response = await fetch(`${answers.ollamaUrl}/api/tags`);

  src/cli/axiom-chat-utils.ts, line 163

  const ollamaResponse = await fetch(apiUrl, {

  src/cli/axiom-chat-utils.ts, line 175

  const response = await fetch(apiUrl, {

  src/cli/axiom-chat.ts, line 347

  const ollamaResponse = await fetch(apiUrl, {

  src/cli/axiom-chat.ts, line 359

  const response = await fetch(apiUrl, {

  src/gateway/BifrostClient.ts, line 59

  const response = await fetch(`${this.baseUrl}/v1/chat/completions`, {

  .kiro/specs/memory-system/design.md, line 1275

  const response = await fetch('http://localhost:3000/api/memory/search', {

  .kiro/specs/memory-system/design.md, line 1289

  fetch('http://localhost:3000/api/memory/extract-truths', {

  docs/API-GUIDE.md, line 326

  const response = await fetch('http://localhost:3001/api/memory/search', {

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  src/cli/axiom-assistant.ts, line 408

  await axiomThinks('Generating .env file...', 1000);

  src/cli/axiom-assistant.ts, line 410

  // Generate .env content

  src/cli/axiom-assistant.ts, line 451

  // Write .env file

  Show more

  src/cli/axiom-assistant.ts, line 453

  await fs.writeFile('.env', envContent);

  src/cli/axiom-assistant.ts, line 454

  await axiomSays('Configuration file created: .env');

  src/cli/axiom-assistant.ts, line 463

  await axiomSays(`Error writing .env file: ${(error as Error).message}`);

  src/cli/axiom-chat-utils.ts, line 10

  // Load .env from multiple possible locations

  src/cli/axiom-chat-utils.ts, line 12

  path.join(process.cwd(), '.env'),

  src/cli/axiom-chat-utils.ts, line 32

  if (process.env.ZAI_API_KEY) return 'zai';

  src/cli/axiom-chat-utils.ts, line 33

  if (process.env.OPENROUTER_API_KEY) return 'openrouter';

  src/cli/axiom-chat-utils.ts, line 145

  'Authorization': `Bearer ${process.env.ZAI_API_KEY}`,

  src/cli/axiom-chat-utils.ts, line 152

  'Authorization': `Bearer ${process.env.OPENROUTER_API_KEY}`,

  src/cli/axiom-chat.ts, line 219

  if (process.env.ZAI_API_KEY) return 'zai';

  src/cli/axiom-chat.ts, line 220

  if (process.env.OPENROUTER_API_KEY) return 'openrouter';

  src/cli/axiom-chat.ts, line 329

  'Authorization': `Bearer ${process.env.ZAI_API_KEY}`,

  src/cli/axiom-chat.ts, line 336

  'Authorization': `Bearer ${process.env.OPENROUTER_API_KEY}`,

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Note

  no licence file found.

  LICENCE_MISSING

  No file path was stored.

  no licence file found.

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit e43bf635a2ad. can delete files. install fetches a script from the network. can reach api.z.ai. The description does not name that host. can reach openrouter.ai. The description does not name that host. can reach a host that is not written as a fixed address. reads a credential or environment file. no licence file found.

Date and source

Date checked: 16 Oct 2026

Read how this letter is chosen