@douyin-minigame/cli@0.2.0
抖音小游戏 CLI
AI Security Review
scanned 3mo ago · by lpm-firewall-aiWarn because explicit commands can modify global agent-skill configuration and emit command telemetry. The behavior is package-aligned and user-triggered, so a publish block is not warranted.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs `dymg skills install`, `dymg update`, or a normal dymg command.
Impact
Can alter a user's global Agent Skill setup on explicit invocation and transmit command metadata.
Mechanism
Explicit global Agent Skill installation and command telemetry.
AI rationale
Warn because explicit commands can modify global agent-skill configuration and emit command telemetry. The behavior is package-aligned and user-triggered, so a publish block is not warranted.
Evidence
dist/cli.jsskills/douyin-minigame/SKILL.mdpackage.json
Network endpoints3
mcs.zijieapi.comsgali-mcs.byteoversea.commaliva-mcs.byteoversea.com
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Explicit `dymg skills install` invokes `npx skills add` with global copy options.
- CLI telemetry collects command request parameters and account/client identifiers.
- Packaged Skill directs agents to invoke this CLI.
Evidence against
- package.json has no preinstall, install, postinstall, or other lifecycle scripts.
- Skill installation is exposed as an explicit CLI command, not automatic npm-install behavior.
- No hidden payload execution, credential harvesting, or foreign control-surface mutation was confirmed.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/cli.jsView file
6custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:u}=r,n=i(r,["custom"]);this.customField=JSON.parse(u||"{}"),Object.assign(this.partialHeaderFields,n),Object.assign(this.userFields,e.user),Object.a...
L8: ${n}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,u=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void u.push("");let n=...
High
6custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:u}=r,n=i(r,["custom"]);this.customField=JSON.parse(u||"{}"),Object.assign(this.partialHeaderFields,n),Object.assign(this.userFields,e.user),Object.a...
L8: ${n}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,u=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void u.push("");let n=...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L66custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:u}=r,n=i(r,["custom"]);this.customField=JSON.parse(u||"{}"),Object.assign(this.partialHeaderFields,n),Object.assign(this.userFields,e.user),Object.a...
L8: ${n}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,u=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void u.push("");let n=...
Findings
5 High3 Medium4 Low
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighObfuscated Payload Loaderdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @douyin-minigame/cli@0.2.0.
See all versions of @douyin-minigame/cli for other recorded verdicts.
- Review the evidence and your use of @douyin-minigame/cli@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.