SAGE Wrapper

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution.

  PERMISSION_SHELL_UNDECLARED

  scripts/create_demo_video_assets.py, line 26

  proc = subprocess.run(

  scripts/create_demo_video_assets.py, line 206

  subprocess.run(cmd, check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE)

  src/sage/runner.py, line 165

  process = subprocess.Popen(

  Show more

  src/sage/runner.py, line 543

  returncode = subprocess.call(

  src/sage/searcher.py, line 161

  completed = subprocess.run(args, capture_output=True, text=True, encoding="utf-8", errors="replace", timeout=120)

  src/sage/telemetry.py, line 89

  result = subprocess.run(

  src/sage/telemetry.py, line 108

  result = subprocess.run(

  src/sage/agentic/loop.py, line 178

  result = subprocess.run(

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  src/sage/github_oauth.py, line 105

  with urllib.request.urlopen(request, timeout=20) as response:

  src/sage/github_oauth.py, line 121

  with urllib.request.urlopen(url, timeout=15) as response:

  src/sage/mcp/client.py, line 219

  with urllib.request.urlopen(req, timeout=timeout) as resp:

  Show more

  src/sage/ml/client.py, line 16

  with socket.create_connection((DAEMON_HOST, DAEMON_PORT), timeout=timeout) as s:

  src/sage/ml/client.py, line 30

  with socket.create_connection((DAEMON_HOST, DAEMON_PORT), timeout=timeout) as s:

  src/sage/ml/daemon.py, line 243

  with socket.create_connection((DAEMON_HOST, DAEMON_PORT), timeout=0.5) as s:

  src/sage/ml/daemon.py, line 344

  with socket.create_connection((DAEMON_HOST, DAEMON_PORT), timeout=2) as s:

  src/sage/ml/soak.py, line 267

  ("curl localhost:8080", "Connection refused", "connection_refused"),

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  codex_sage_ab_proof.py, line 74

  if not os.environ.get("OPENAI_API_KEY"):

  src/sage/agentic/intent.py, line 68

  WorkflowStep("configure", ["cp .env", "config", "setup"]),

  src/sage/ml/predictors/context_predictor.py, line 42

  venv_dirs = [".venv", "venv", "env", ".env"]

  Show more

  .gitignore, line 60

  *.env

  PRIVACY.md, line 23

  Telemetry level `0` sends nothing. Level `1` sends aggregate proof counters such as total runs, token counts, compression rate, and success rate. It does not send raw commands, raw

  SECURITY.md, line 32

  SAGE CLI redacts common credential patterns before storing captured output. Redacted patterns include GitHub tokens, OpenAI-style API keys, AWS access keys, bearer tokens, password

  SECURITY.md, line 39

  - Publish source code, file paths, `.env` contents, private logs, or secrets to the dashboard.

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit fa59f9719c63. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. reads a credential or environment file.

Date and source

Date checked: 19 Oct 2026

Read how this letter is chosen