registry / @intellicore/cli / 0.3.0

@intellicore/cli@0.3.0

IntelliCore CLI — agentflow를 터미널에서 실행하는 AI 개발 도구

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 28 file(s), 176 KB of source, external domains: deb.nodesource.com, get.docker.com, github.com, sh.rustup.rs

Source & flagged code

2 flagged

dist/update-VCNB6JLS.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

3// src/features/update/update.ts

4import { execSync } from "child_process";

5import chalk from "chalk";

High

Child Process

Package source references child process execution.

dist/update-VCNB6JLS.jsView on unpkg · L3

6async function updateCommand() {

7 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uD655\uC778 \uC911..."));

8 try {

9 const latest = execSync("npm view @intellicore/cli version 2>/dev/null", {

10 encoding: "utf-8"

11 }).trim();

12 const current = true ? "0.3.0" : "0.1.0";

13 if (latest === current) {

14 console.log(chalk.green(` \u2713 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4 (v${current})`));

15 return;

16 }

17 console.log(chalk.yellow(` \uD604\uC7AC: v${current} \u2192 \uCD5C\uC2E0: v${latest}`));

18 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uC911..."));

19 execSync("npm install -g @intellicore/cli@latest", {

20 encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/update-VCNB6JLS.jsView on unpkg · L18

21 stdio: "pipe"

22 });

23 console.log(chalk.green(` \u2713 v${latest}\uB85C \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC`));

24 console.log(chalk.dim(" \uBCC0\uACBD\uC0AC\uD56D: https://github.com/SolomonJongmin/intellicore-cli/releases"));

25 } catch (err) {

26 try {

27 console.log(chalk.dim(" npm \uD328\uD0A4\uC9C0 \uBBF8\uB4F1\uB85D \u2014 git pull\uB85C \uC5C5\uB370\uC774\uD2B8 \uC2DC\uB3C4..."));

28 const output = execSync("git pull origin main", {

29 encoding: "utf-8",

30 cwd: getInstallDir()

31 });

32 console.log(chalk.dim(` ${output.trim()}`));

33 execSync("npm install && npm run build", {

34 encoding: "utf-8",

35 cwd: getInstallDir(),

36 stdio: "pipe"

37 });

38 console.log(chalk.green(" \u2713 \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC (git pull + rebuild)"));

Source & flagged code

2 flagged · loading source

dist/update-VCNB6JLS.jsView file

3// src/features/update/update.ts L4: import { execSync } from "child_process"; L5: import chalk from "chalk";

High

Child Process

Package source references child process execution.

dist/update-VCNB6JLS.jsView on unpkg · L3

18console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uC911...")); L19: execSync("npm install -g @intellicore/cli@latest", { L20: encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/update-VCNB6JLS.jsView on unpkg · L18

Findings

3 High3 Medium5 Low

HighChild Processdist/update-VCNB6JLS.js

HighShell

HighRuntime Package Installdist/update-VCNB6JLS.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/update-VCNB6JLS.jsView file

Lines 1-38javascript

1#!/usr/bin/env node

3// src/features/update/update.ts

4import { execSync } from "child_process";

5import chalk from "chalk";

High

Child Process

Package source references child process execution.

dist/update-VCNB6JLS.jsView on unpkg · L3

6async function updateCommand() {

7 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uD655\uC778 \uC911..."));

8 try {

9 const latest = execSync("npm view @intellicore/cli version 2>/dev/null", {

10 encoding: "utf-8"

11 }).trim();

12 const current = true ? "0.3.0" : "0.1.0";

13 if (latest === current) {

14 console.log(chalk.green(` \u2713 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4 (v${current})`));

15 return;

16 }

17 console.log(chalk.yellow(` \uD604\uC7AC: v${current} \u2192 \uCD5C\uC2E0: v${latest}`));

18 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uC911..."));

19 execSync("npm install -g @intellicore/cli@latest", {

20 encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/update-VCNB6JLS.jsView on unpkg · L18

21 stdio: "pipe"

22 });

23 console.log(chalk.green(` \u2713 v${latest}\uB85C \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC`));

24 console.log(chalk.dim(" \uBCC0\uACBD\uC0AC\uD56D: https://github.com/SolomonJongmin/intellicore-cli/releases"));

25 } catch (err) {

26 try {

27 console.log(chalk.dim(" npm \uD328\uD0A4\uC9C0 \uBBF8\uB4F1\uB85D \u2014 git pull\uB85C \uC5C5\uB370\uC774\uD2B8 \uC2DC\uB3C4..."));

28 const output = execSync("git pull origin main", {

29 encoding: "utf-8",

30 cwd: getInstallDir()

31 });

32 console.log(chalk.dim(` ${output.trim()}`));

33 execSync("npm install && npm run build", {

34 encoding: "utf-8",

35 cwd: getInstallDir(),

36 stdio: "pipe"

37 });

38 console.log(chalk.green(" \u2713 \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC (git pull + rebuild)"));