Static Scan Results
scanned 9h ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
CopyleftLicense
Source & flagged code
2 flagged · loading sourcescripts/ai-proxy.jsView file
2L3: const { execSync } = require('child_process');
L4: const path = require('path');
...
L30:
L31: const LITELLM_CONFIG_FILE = path.join(os.homedir(), '.pi-antigravity-rotator', 'litellm_config.yaml');
L32: const LITELLM_LOG_FILE = path.join(os.homedir(), '.pi-antigravity-rotator', 'litellm.log');
...
L38: model: openai/gemini-3.1-pro
L39: api_base: http://127.0.0.1:51200/v1
L40: api_key: dummy
...
L197:
L198: runCommand(`launchctl load -w "${path.join(plistDir, 'com.wizardai.proxy.plist')}"`, true);
L199: runCommand(`launchctl load -w "${path.join(plistDir, 'com.wizardai.proxy.litellm.plist')}"`, true);
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
scripts/ai-proxy.jsView on unpkg · L2scripts/install-mattpocock-skills.shView file
•path = scripts/install-mattpocock-skills.sh
kind = build_helper
sizeBytes = 2656
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
scripts/install-mattpocock-skills.shView on unpkgFindings
4 Medium4 Low
MediumEnvironment Vars
MediumInstall Persistencescripts/ai-proxy.js
MediumShips Build Helperscripts/install-mattpocock-skills.sh
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License