registry / @ai-support-agent/cli / 0.5.12
@ai-support-agent/cli@0.5.12
⚠ Under reviewAI Support Agent CLI client
Static Scan Results
scanned 27d ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedansible/roles/database/tasks/main.ymlView file
96patternName = generic_password
severity = medium
line = 96
Medium
Secret Pattern
Package contains a possible secret pattern.
ansible/roles/database/tasks/main.ymlView on unpkg · L96100patternName = generic_password
severity = medium
line = 100
Medium
Secret Pattern
Hardcoded password in ansible/roles/database/tasks/main.yml
ansible/roles/database/tasks/main.ymlView on unpkg · L100160patternName = generic_password
severity = medium
line = 160
Medium
Secret Pattern
Hardcoded password in ansible/roles/database/tasks/main.yml
ansible/roles/database/tasks/main.ymlView on unpkg · L160Findings
3 High10 Medium5 Low
HighTrigger Reachable Persistencedist/terminal/terminal-session.js
HighSemantic Analysis Limiteddist/agent-transport.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/cli/service/darwin-service.js
MediumSecret Patternansible/roles/database/tasks/main.yml
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/terminal/terminal-session.js
MediumShips Build Helperdocker/bashrc-extra.sh
MediumStructural Risk Force Deep Review
MediumSecret Patternansible/roles/database/tasks/main.yml
MediumSecret Patternansible/roles/database/tasks/main.yml
MediumSecret Patternansible/roles/zabbix_server/tasks/local-db.yml
Affected versions and remediation
This report applies to @ai-support-agent/cli@0.5.12.
See all versions of @ai-support-agent/cli for other recorded verdicts.
- Review the evidence and your use of @ai-support-agent/cli@0.5.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.