@aswless_854771076/ai_short_studio_cli@0.1.97
VVICAT 无限画布项目命令行工具
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe default install-time write to the user's Codex skills directory creates an agent integration without a separate setup action, so residual lifecycle risk remains. The inspected source supports a warning for first-party skill setup, but not a finding of credential theft, remote execution, or broad agent-control abuse.
Decision evidence
public snapshot- package.json runs a postinstall script; it proceeds by default unless the skip variable is set or the install directory matches the package root.
- The hook calls the skill manager, whose default destination is the current user's Codex skills directory; the manager copies the bundled skill there.
- The bundled skill provides VVICAT CLI workflow guidance. The manager skips existing unmanaged or modified skills, limiting replacement of user-managed content.
- Inspected source shows no credential transfer or remote payload execution in this install path.
- The installed content is a first-party skill for using this package's CLI, and modified or unmanaged destination skills are skipped.
Source & flagged code
5 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgpackage.json runs a postinstall script; it proceeds by default unless the skip variable is set or the install directory matches the package root.
package.jsonView on unpkg · L30Findings
Affected versions and remediation
This report applies to @aswless_854771076/ai_short_studio_cli@0.1.97.
See all versions of @aswless_854771076/ai_short_studio_cli for other recorded verdicts.
- Review the evidence and your use of @aswless_854771076/ai_short_studio_cli@0.1.97 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.