registry / @conceptcraft/mindframes / 0.3.2

@conceptcraft/mindframes@0.3.2

CLI tool for creating AI-powered presentations with ConceptCraft

Static Scan Results

scanned 29d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 3 file(s), 265 KB of source, external domains: blog.example.com, cc-cb-slides.s3.us-east-2.amazonaws.com, company.com, competitor.com, custom-api.example.com, docs.example.com, docs.mindframes.ai, example.com, fonts.googleapis.com, storage.example.com, twitter.com, www.mindframes.app, www.youtube.com, x.com, youtu.be, youtube.com

Source & flagged code

5 flagged

package.jsonView file

Lines 7-47json

7 "mf": "./bin/cli.js",

8 "mindframes": "./bin/cli.js"

9 },

10 "files": [

11 "bin",

12 "dist",

13 "LICENSE",

14 "README.md"

15 ],

16 "scripts": {

17 "build": "tsup",

18 "dev": "tsup --watch",

19 "cli:staging": "pnpm build && CONCEPTCRAFT_API_URL=https://cc-slides.productcabin.co node bin/cli.js",

20 "cli:local": "pnpm build && CONCEPTCRAFT_API_URL=http://localhost:3000 node bin/cli.js",

21 "cli:smoke": "bash scripts/live-smoke.sh",

22 "lint": "biome lint --write --unsafe",

23 "format": "biome format --write",

24 "typecheck": "tsc --noEmit",

25 "verify:package": "node scripts/verify-package.mjs",

26 "prepublishOnly": "npm run build && npm run verify:package",

27 "postinstall": "node ./bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "vitest run",

29 "test:watch": "vitest",

30 "test:coverage": "vitest run --coverage",

31 "test:e2e": "vitest run --config vitest.e2e.config.ts",

32 "test:integration": "vitest run --config vitest.integration.config.ts",

33 "test:plan": "vitest run --config vitest.integration.config.ts tests/integration/video-plan",

34 "test:all": "vitest run && vitest run --config vitest.e2e.config.ts"

35 },

36 "keywords": [

37 "conceptcraft",

38 "slides",

39 "presentation",

40 "ai",

41 "cli",

42 "powerpoint",

43 "deck",

44 "generator"

45 ],

46 "author": "ConceptCraft AI",

47 "license": "SEE LICENSE IN LICENSE",

bin/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3/**

4 * Post-install script

5 * Installs the main skill and recommended external skills

6 */

8import { execSync } from "child_process";

9import { fileURLToPath } from "url"

dist/index.jsView file

Lines 13-62javascript

13 </html>

14 `),a(),o(new Error(k||y));return}if(!v||!g){f.end(`

15 <!DOCTYPE html>

16 <html>

17 <head><title>Login Failed</title></head

Source & flagged code

5 flagged · loading source

package.jsonView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code