registry  /  @12errh/antigravity-proxy  /  1.0.4

@12errh/antigravity-proxy@1.0.4

LLM proxy for Antigravity — translate Google Gemini API calls to any provider

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 123 file(s), 722 KB of source, external domains: api.anthropic.com, api.groq.com, api.openai.com, generativelanguage.googleapis.com, integrate.api.nvidia.com, opencode.ai, openrouter.ai

Source & flagged code

3 flagged · loading source
dist/cli/utils/port.jsView file
1import { execSync } from 'child_process'; L2: import { platform } from 'os';
High
Child Process

Package source references child process execution.

dist/cli/utils/port.jsView on unpkg · L1
dist/cli/utils/cert.jsView file
31catch { L32: // If that fails, try PowerShell elevation L33: try {
High
Shell

Package source references shell execution.

dist/cli/utils/cert.jsView on unpkg · L31
dist/cli/commands/start.jsView file
97console.log(' Installing dependencies...'); L98: execSync('npm install --production', { cwd: PROXY_DIR, stdio: 'inherit', timeout: 120000 }); L99: }
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/start.jsView on unpkg · L97

Findings

3 High3 Medium6 Low
HighChild Processdist/cli/utils/port.js
HighShelldist/cli/utils/cert.js
HighRuntime Package Installdist/cli/commands/start.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License