registry  /  @ampcode/cli  /  0.0.1783038096-g491b5f

@ampcode/cli@0.0.1783038096-g491b5f

CLI for Amp, the frontier coding agent.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystem
Supply chain
UrlStrings
Manifest
NoLicense
scanned 2 file(s), 5.41 KB of source, external domains: ampcode.com

Source & flagged code

3 flagged · loading source
package.jsonView file
•scripts.postinstall = node install.cjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
cli-wrapper.cjsView file
1#!/usr/bin/env node L2: const { spawnSync } = require('node:child_process') L3: const { arch, constants } = require('node:os') ... L5: L6: const WRAPPER_NAME = require('./package.json').name L7: const PLATFORMS = { ... L15: function printHelp() { L16: console.error(' For help, visit https://ampcode.com/manual or email amp-devs@ampcode.com.') L17: } ... L19: function detectMusl() { L20: if (process.platform !== 'linux') { L21: return false
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli-wrapper.cjsView on unpkg · L1
bin/amp.exeView file
•path = bin/amp.exe kind = native_binary sizeBytes = 141 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

bin/amp.exeView on unpkg

Findings

2 High3 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitycli-wrapper.cjs
MediumEnvironment Vars
MediumShips Native Binarybin/amp.exe
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License