Louis-CFM/coucou

Review signals: 1 connection review, 3 hardcoded secret, 26 known vulnerability. 8 static matches retained as context.

Reviewed as expected for a test run: package managers (cargo) downloaded dependencies over HTTPS; resolver address lookups that send no data; wrote only to its own open file handles.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 7 distinct locations. 3 attributed processes.

Gitleaks found a possible hardcoded secret; value withheld. 3 distinct locations. 3 findings.

OSV reports a known vulnerability in this dependency version. 12 distinct locations. 26 findings.

8 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• If Coucou is not running, the Coucou hook relay exits immediately and never blocks Claude Code: Real input produced the expected result: {"decision":"ask"}

  Source: README.md

  Input: coucou-hook --agent antigravity PreToolUse with no Coucou app running

  Expected: hook exits 0 and prints the no-opinion reply {"decision":"ask"}

  Command: <guest-path> --agent antigravity PreToolUse

  Observed: {"decision":"ask"}

Examples

• Offline test suite of the Windows/Linux codebase: command completed successfully

  Source: windows/package.json

  Input: npm test

  Expected: tests pass

  Command: /opt/node22/bin/npm test

  Observed: tion_ms: 0.475799 type: 'test' ... # Subtest: a conversation: its messages, a reply sent on Enter only, Escape back to the list ok 465 - a conversation: its messages, a reply sent on Enter only, Escape back to the list --- duration_ms: 0.955005 type: 'test' ... # Subtest: the conversation closes when WhatsApp is turned off or the island folds ok 466 - the conversation closes when WhatsApp is turned off or the island folds --- duration_ms: 0.576399 type: 'test' ... 1..466 # tests 466 # suites 0 # pass 466 # fail 0 # cancelled 0 # skipped 0 # todo 0 # duration_ms 68278.088933

Local or hosted: local

Build Coucou for Linux from source per README (npm install + npm run pack in windows/), then run the documented relay CLI coucou-hook --agent antigravity PreToolUse with a stdin hook payload and observe the no-opinion reply

cd <guest-path> && pwd && ls -la && id -u && python3 --version && (cat /etc/os-release | head -3) && git status 2>&1 | head -2
cd <guest-path> && cat README.md | head -250
cd <guest-path> && grep -n '^## \|^### ' README.md | sed -n '1,200p'
cd <guest-path> && sed -n '260,345p' README.md
for c in node npm cargo rustc pkg-config; do printf "%s: " $c; command -v $c || echo missing; done; node -v 2>/dev/null; npm -v 2>/dev/null; sudo -n true && echo SUDO_OK; ls <guest-path> | head -50; cat <guest-path> 2>/dev/null
sudo DEBIAN_FRONTEND=noninteractive apt-get update -qq 2>&1 | tail -3; sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq build-essential pkg-config libwebkit2gtk-4.1-dev libgtk-layer-shell-dev libayatana-appindicator3-dev librsvg2-dev libssl-dev libdbus-1-dev patchelf gstreamer1.0-plugins-base gstreamer1.0-plugins-good curl ca-certificates > /tmp/apt.log 2>&1; echo rc=$?; tail -5 /tmp/apt.log
cd <guest-path> && grep -n -i 'linux' windows/README.md | head -40
cd <guest-path> && sed -n '1,30p' windows/README.md; echo ----; sed -n '648,700p' windows/README.md
cd /tmp && curl -fsSL https://sh.rustup.rs -o /tmp/rustup-init.sh && sh /tmp/rustup-init.sh -y --profile minimal > /tmp/rustup.log 2>&1; echo rc=$?; tail -3 /tmp/rustup.log; ~/.cargo/bin/cargo --version
cd /tmp && export NODE_USE_ENV_PROXY=1 && curl -fsSL https://nodejs.org/dist/latest-v22.x/SHASUMS256.txt -o /tmp/shasums.txt; echo rc=$?; grep 'linux-x64.tar.xz' /tmp/shasums.txt
mkdir -p /tmp/node-dl && cd /tmp/node-dl && curl -fsSL https://nodejs.org/dist/latest-v22.x/node-v22.23.4-linux-x64.tar.xz -o node.tar.xz && echo "1805bcd35e6815559bd2eb97db438d3fdb0eb3a5e6a977b7c1badca76337e9ce  node.tar.xz" | sha256sum -c && sudo mkdir -p /opt/node22 && sudo tar -xJf node.tar.xz -C /opt/node22 --strip-components=1 && /opt/node22/bin/node -v && /opt/node22/bin/npm -v
export PATH=/opt/node22/bin:$HOME/.cargo/bin:$PATH && node -v && npm -v && cargo -V && pkg-config --modversion webkit2gtk-4.1 && pkg-config --modversion gtk-layer-shell-0 2>/dev/null; echo ok
export PATH=/opt/node22/bin:$HOME/.cargo/bin:$PATH && cd <guest-path> && npm install > /tmp/npm-install.log 2>&1; echo rc=$?; tail -15 /tmp/npm-install.log
export PATH=/opt/node22/bin:$HOME/.cargo/bin:$PATH && cd <guest-path> && nohup npm run pack > /tmp/pack.log 2>&1 &
sleep 5; tail -3 /tmp/pack.log
sleep 240; tail -4 /tmp/pack.log
grep -n -B3 -A12 'error' /tmp/pack.log | head -120
grep -n -A25 '^error' /tmp/pack.log | head -90
sed -n '907,912p' /tmp/pack.log; sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq libasound2-dev > /tmp/apt2.log 2>&1; echo apt_rc=$?; export PATH=/opt/node22/bin:$HOME/.cargo/bin:$PATH && cd <guest-path> && nohup npm run pack > /tmp/pack2.log 2>&1 & sleep 200; tail -3 /tmp/pack2.log
sleep 120; tail -6 /tmp/pack2.log; echo; ls -la <guest-path> 2>/dev/null
pgrep -af 'tauri|npm run pack|linuxdeploy' | head; echo ---; curl -sS -m 20 -o /dev/null -w '%{http_code}\n' https://github.com/tauri-apps/binary-releases/releases/download/apprun-old/AppRun-x86_64; echo "proxy=${HTTPS_PROXY:-${https_proxy:-none}}"
for i in $(seq 1 20); do if pgrep -f 'npm run pack' >/dev/null; then sleep 10; else break; fi; done; pgrep -f 'npm run pack' >/dev/null && echo STILL_RUNNING || echo DONE; tail -5 /tmp/pack2.log
for i in $(seq 1 25); do if pgrep -f 'npm run pack' >/dev/null; then sleep 10; else break; fi; done; pgrep -f 'npm run pack' >/dev/null && echo STILL_RUNNING || echo DONE; tail -4 /tmp/pack2.log; ls <guest-path> 2>/dev/null
ps -o pid,etime,stat,pcpu,args -C linuxdeploy,ldd,strip,appimagetool 2>/dev/null | cut -c1-160; ps -eo pid,etime,stat,pcpu,comm | grep -i -E 'linuxdeploy|appimage|patchelf|strip|ldd|bash|node' | head -20; ls -la <guest-path> 2>/dev/null
ps --ppid 23527,23410,20387 -o pid,ppid,stat,etime,args | cut -c1-200; echo ---; for p in 23527 23410; do echo "pid $p wchan=$(cat /proc/$p/wchan 2>/dev/null)"; ls -l /proc/$p/fd 2>/dev/null | tail -5; done; echo ---; env | grep -i proxy | sed 's/=.*/=<set>/'
for i in $(seq 1 25); do if pgrep -f 'npm run pack' >/dev/null; then sleep 10; else break; fi; done; pgrep -f 'npm run pack' >/dev/null && echo STILL_RUNNING || echo DONE; tail -3 /tmp/pack2.log | cut -c1-300
for i in $(seq 1 10); do if pgrep -f 'npm run pack' >/dev/null; then sleep 5; else break; fi; done; pgrep -f 'npm run pack' >/dev/null && echo STILL_RUNNING || echo DONE; grep -v '^\s*$' /tmp/pack2.log | tail -12 | cut -c1-250; echo ---; ls -la <guest-path>
pgrep -af 'npm run pack' | cut -c1-120; cd <guest-path> && ls hook scripts tests src-tauri | head -60; echo ---; grep -n -i 'coucou-hook\|--once\|cli\|subcommand\|usage' README.md | head -40
cd <guest-path> && pgrep -f 'npm run pack' >/dev/null && echo still || echo pack_done; ls -la target/release/coucou-hook target/release/coucou 2>&1; ls hook/src; grep -n -i 'statusline\|--agent\|args\|println\|print!' hook/src/*.rs | head -60
cd <guest-path> && sed -n '1,30p' hook/src/main.rs; echo ...; sed -n '95,150p' hook/src/main.rs; echo ...; grep -n 'fn stdout' -A12 hook/src/reply.rs | head -40
cd <guest-path> && grep -rn 'eprintln!\|println!\|info!(' src-tauri/src | head -20; echo ---; grep -rln 'coucou.sock' src-tauri/src hook/src | head; echo ---; echo "DISPLAY=${DISPLAY:-unset} WAYLAND=${WAYLAND_DISPLAY:-unset} XDG_RUNTIME_DIR=${XDG_RUNTIME_DIR:-unset}"; pgrep -f 'npm run pack' >/dev/null && echo still || echo pack_done
cd <guest-path> && sed -n '1,25p' src-tauri/src/phone_link/interop.rs; echo ---; grep -rn 'interop' src-tauri/src/*.rs src-tauri/src/phone_link/mod.rs | head -8; echo ---; grep -n -i 'interop\|--' ../windows/README.md | grep -i 'coucou ' | head
cd <guest-path> && grep -n 'coucou --\|coucou-hook\|`--[a-z]' README.md | head -30; echo ---; sed -n '715,735p' README.md
for i in $(seq 1 15); do if pgrep -f 'npm run pack' >/dev/null; then sleep 5; else break; fi; done; pgrep -f 'npm run pack' >/dev/null && echo still || echo pack_done; cd <guest-path> && printf '%s' '{"toolName":"edit","toolArgs":{"path":"a.rs"}}' | ./target/release/coucou-hook --agent copilot preToolUse; echo "rc=$?"; printf '%s' '{"hook_event_name":"Stop","session_id":"s1"}' | ./target/release/coucou-hook; echo "rc=$?"
ps -eo pid,etime,stat,args | grep -E 'npm|node|pack|tauri' | grep -v grep | cut -c1-180; echo ---; tail -3 /tmp/pack2.log | cut -c1-200
cd <guest-path> && H=./target/release/coucou-hook; printf '%s' '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"ls"},"cwd":"/tmp"}' | $H; echo "claude rc=$?"; printf '%s' '{"toolCall":{"name":"run_command","args":{"CommandLine":"ls"}}}' | $H --agent antigravity PreToolUse; echo "agy rc=$?"; echo ---; grep -n 'fn wants_json' -A8 hook/src/reply.rs
cd <guest-path> && grep -n -i 'hook\|never blocked\|relay\|ask' README.md | cut -c1-260 | head -40
cd <guest-path> && ls checker 2>/dev/null; grep -n -i 'stdin\|"cli"\|cycles\|examples' checker/check.py 2>/dev/null | head -40; ls workspace/.coldpass 2>/dev/null
cd <guest-path> && sed -n 600,640p checker/check.py; sed -n 955,1010p checker/check.py; sed -n 1100,1130p checker/check.py
cd <guest-path> && grep -rn -i 'cron\|--once\|--now\|setInterval\|schedule' hook/src/*.rs src-tauri/src/main.rs 2>/dev/null | cut -c1-200 | head -20; grep -rln 'cron' --include=*.rs . 2>/dev/null | grep -v target | head; ls <guest-path> 2>/dev/null; echo done
mkdir -p <guest-path> && rmdir <guest-path> && cd <guest-path> && cat > probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","--agent","antigravity","PreToolUse"],"cwd":"<guest-path>","stdin":"{\"toolCall\":{\"name\":\"run_command\",\"args\":{\"CommandLine\":\"ls\"}}}","expected_text":"{\"decision\":\"ask\"}"}
EOF
cat > claims.json <<'EOF'
[{"kind":"claim","claim":"If Coucou is not running, the Coucou hook relay exits immediately and never blocks Claude Code","source":"README.md","quote":"If Coucou isn't running, the hook exits immediately: **Claude Code is never blocked.**","input":"coucou-hook --agent antigravity PreToolUse with no Coucou app running","expected":"hook exits 0 and prints the no-opinion reply {\"decision\":\"ask\"}","probe_kind":"cli","argv":["<guest-path>","--agent","antigravity","PreToolUse"],"cwd":"<guest-path>","stdin":"{\"toolCall\":{\"name\":\"run_command\",\"args\":{\"CommandLine\":\"ls\"}}}","expected_text":"{\"decision\":\"ask\"}"}]
EOF
cat > examples.json <<'EOF'
[{"claim":"Offline test suite of the Windows/Linux codebase","source":"windows/package.json","input":"npm test","expected":"tests pass","argv":["/opt/node22/bin/npm","test"],"cwd":"<guest-path>","env":{"PATH":"/opt/node22/bin:/usr/local/bin:/usr/bin:/bin"}}]
EOF
cat > cycles.json <<'EOF'
{"detected":false,"reason":"No cron, schedule, --once or --now entry point in the Coucou CLI surface: coucou-hook is a per-event relay that runs once per agent hook invocation and exits, and the app is a long-running GUI with no scheduled CLI cycle to replay. Checked windows/hook/src/*.rs and windows/src-tauri/src/main.rs for cron/schedule/--once/--now; none found.","checks":[]}
EOF
for f in *.json; do python3 -I -m json.tool $f >/dev/null && echo "ok $f"; done
cd <guest-path> && PATH=/opt/node22/bin:$PATH timeout 900 /opt/node22/bin/npm test 2>&1 | tail -15; echo rc=$?
cd <guest-path> && <env-var>=<guest-path> timeout 1500 python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo rc=${PIPESTATUS[0]}
pgrep -fa 'coucou' | grep -v pgrep || echo "no coucou processes"; cd <guest-path> && cat > report.json <<'EOF'
{
  "outcome": "working",
  "fault_owner": "none",
  "operation": "Build Coucou for Linux from source per README (npm install + npm run pack in windows/), then run the documented relay CLI coucou-hook --agent antigravity PreToolUse with a stdin hook payload and observe the no-opinion reply",
  "operation_scope": "product operation: coucou-hook relay binary built from pinned commit 7ea7b229b938de4a08957a4de88bb5f058532d51; Coucou app not running; GUI not launched",
  "steps": [
    "Installed Node v22.23.4 (linux-x64) into /opt/node22 from the nodejs.org tarball, sha256 verified; npm 10.9.9",
    "Installed Rust toolchain via rustup (stable, cargo 1.99.1)",
    "Installed apt prerequisites from windows/README.md Linux section",
    "Ran npm install in windows/ (log /tmp/npm-install.log)",
    "First npm run pack failed: alsa-sys pkg-config error; installed libasound2-dev and re-ran",
    "Second npm run pack succeeded (log /tmp/pack2.log): AppImage, deb, rpm produced under windows/release/ and windows/target/release/bundle/",
    "Ran coucou-hook --agent antigravity PreToolUse with stdin toolCall payload; observed {\"decision\":\"ask\"} rc=0",
    "Ran npm test in windows/: 466 pass, 0 fail",
    "Checker with --validate --replay: valid, no problems, replay PASS"
  ],
  "deviations": [
    "Installed libasound2-dev (alsa development package) which is not in the README apt list; required because alsa-sys build script failed without it",
    "Node.js and Rust were not preinstalled; installed them manually as prerequisites",
    "npm run pack (linuxdeploy step) was very slow, about 15 minutes",
    "npm audit reported 1 high-severity dependency vulnerability; not fixed, not required by the README",
    "GUI app was not launched (requires a display; not in README setup path for this probe)"
  ],
  "stuck_step": "none in final run; first pack attempt blocked on missing libasound2-dev",
  "main_blocker": "none for the final run",
  "plain_failure": "none in the final run",
  "suggested_fix": "Add libasound2-dev to the Linux apt install list in README/windows README, since the pack build fails without it"
}
EOF
python3 -I -m json.tool report.json >/dev/null && echo report ok; cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | head -c 300; echo; ls -la <guest-path> 2>/dev/null || echo "no root report.json"