Loading npm security reports…
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
On explicit launcher use, the package obtains remote MCP package details, runs those packages, and supplies them with portal credentials and locally stored secrets. A separate MCP tool runs a server-provided install command.
Package source references dynamic require/import behavior.
dist/bin/salesbot7.jsView on unpkg · L2This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L1This report applies to @funny-booth/agent-core@0.1.13.
See version security history for other recorded verdicts.
Evidence last updated: .
Package source references dynamic require/import behavior.
dist/bin/salesbot7.jsView on unpkg · L2A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L1This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg