registry / @douyin-minigame/cli / 0.5.1
@douyin-minigame/cli@0.5.1
抖音小游戏 CLI
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and agent skill setup is exposed through an explicit CLI command. Its global, all-target copy request creates an agent-extension setup risk, but inspected source does not establish an active attack, so downgrade to a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs dymg skills install; the update command also offers bundled skill synchronization.
Impact
The external installer may add the skill to agent environments beyond the immediate CLI. Its exact destination behavior is not established by this package source.
Mechanism
dist/cli.js invokes npx skills add with global, all-target, and copy flags, passing the packaged skill directory.
AI rationale
The package has no install lifecycle hook, and agent skill setup is exposed through an explicit CLI command. Its global, all-target copy request creates an agent-extension setup risk, but inspected source does not establish an active attack, so downgrade to a warning.
Evidence
package.jsondist/cli.jsskills/douyin-minigame/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes dist/cli.js as the dymg command, ships skills/*, and has no npm lifecycle script.
- dist/cli.js passes the bundled skill to npx skills add with global, all-target, and copy flags.
- dist/cli.js registers dymg skills install as an explicit command for syncing the bundled Agent Skill.
- The bundled skill describes Douyin mini-game CLI login, data queries, and exports.
- The skill directs agents to wait for user confirmation before platform write operations.
Evidence against
- The skill setup is behind an explicit CLI command; the package manifest has no install lifecycle hook.
- The inspected skill content is product-aligned and includes confirmation safeguards for platform writes.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
7 flaggeddist/cli.jsView file
6custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:n}=r,u=i(r,["custom"]);this.customField=JSON.parse(n||"{}"),Object.assign(this.partialHeaderFields,u),Object.assign(this.userFields,e.user),Object.a...
L8: ${u}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,n=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void n.push("");let u=...
High
18Expecting one of '${r.join("', '")}'`);return this._lifeCycleHooks[e]?this._lifeCycleHooks[e].push(t):this._lifeCycleHooks[e]=[t],this}exitOverride(e){return e?this._exitCallback=e...
L19: - already used by option '${t.flags}'`)}this._initOptionGroup(e),this.options.push(e)}_registerCommand(e){let t=e=>[e.name()].concat(e.aliases()),r=t(e).find(e=>this._findCommand(...
L20: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu...
High
6custom: {/** custom content */},
L7: })`);let r=e.header||{},{custom:n}=r,u=i(r,["custom"]);this.customField=JSON.parse(n||"{}"),Object.assign(this.partialHeaderFields,u),Object.assign(this.userFields,e.user),Object.a...
L8: ${u}`)}boxWrap(e,t){if(t<this.minWidthToWrap)return e;let r=e.split(/\r\n|\n/),i=/[\s]*[^\s]+/g,n=[];return r.forEach(e=>{let r=e.match(i);if(null===r)return void n.push("");let u=...
Findings
6 High4 Medium5 Low
HighChild Processdist/cli.js
HighShelldist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighObfuscated Payload Loaderdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumDynamic Requiredist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @douyin-minigame/cli@0.5.1.
See all versions of @douyin-minigame/cli for other recorded verdicts.
- Review the evidence and your use of @douyin-minigame/cli@0.5.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.