registry / @douyin-minigame/cli / 0.3.0
@douyin-minigame/cli@0.3.0
抖音小游戏 CLI
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not malware by the inspected source, but its explicit commands can modify a global agent skill surface through an unpinned npx tool and install instructions that affect agent execution. Downgrade to a warning rather than block because there is no automatic install hook or confirmed malicious payload.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs dymg skills install or dymg update.
Impact
The installed skill can influence later agent command selection and login workflow behavior.
Mechanism
Global agent-skill installation through npx.
AI rationale
This is not malware by the inspected source, but its explicit commands can modify a global agent skill surface through an unpinned npx tool and install instructions that affect agent execution. Downgrade to a warning rather than block because there is no automatic install hook or confirmed malicious payload.
Evidence
dist/cli.jsskills/douyin-minigame/SKILL.mdskills/douyin-minigame
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The user-invoked skill installer runs npx to copy the bundled skill globally with broad all-skill selection.
- The update command starts the updated package and runs its skill installer unless skills are skipped.
- The bundled skill directs agents to run this CLI and may switch HOME for its login workflow.
Evidence against
- package.json has no preinstall, install, postinstall, or other lifecycle hook.
- The global skill operation is reachable only through explicit skills install or update commands.
- No source-confirmed secret harvesting, unrelated exfiltration, destructive action, or hidden payload execution was found.
- The network and OAuth code supports the stated developer-platform CLI functions; the large bundle explains the scanner's obfuscation signal.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetwork
HighEntropyStrings
Source & flagged code
5 flaggeddist/cli.jsView file
6custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:u}=r,n=i(r,["custom"]);this.customField=JSON.parse(u||"{}"),Object.assign(this.partialHeaderFields,n),Object.assign(this.userFields,e.user),Object.a...
L8: ${n}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,u=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void u.push("");let n=...
High
6custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:u}=r,n=i(r,["custom"]);this.customField=JSON.parse(u||"{}"),Object.assign(this.partialHeaderFields,n),Object.assign(this.userFields,e.user),Object.a...
L8: ${n}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,u=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void u.push("");let n=...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L66custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:u}=r,n=i(r,["custom"]);this.customField=JSON.parse(u||"{}"),Object.assign(this.partialHeaderFields,n),Object.assign(this.userFields,e.user),Object.a...
L8: ${n}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,u=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void u.push("");let n=...
Findings
5 High3 Medium4 Low
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighObfuscated Payload Loaderdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @douyin-minigame/cli@0.3.0.
See all versions of @douyin-minigame/cli for other recorded verdicts.
- Review the evidence and your use of @douyin-minigame/cli@0.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.