registry / @marcelojrrangel/create-aiox-core / 1.0.0

@marcelojrrangel/create-aiox-core@1.0.0

Scaffold a new AIOX Core project with native OpenCode integration — 13 agents, 215+ tasks, 11 skills, and orchestrated workflows

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 24.3 KB of source

Source & flagged code

6 flagged

templates/.aiox-core/product/templates/engine/elicitation.jsView file

Lines 6-46javascript

6 * @version 2.0.0

7 */

9'use strict';

11const inquirer = require('inquirer');

13/**

14 * Map template variable types to inquirer question types

15 * @param {string} type - Template variable type

16 * @returns {string} Inquirer question type

17 */

18function mapQuestionType(type) {

19 const typeMap = {

20 string: 'input',

21 text: 'editor',

22 number: 'number',

23 boolean: 'confirm',

24 choice: 'list',

25 multichoice: 'checkbox',

26 password: 'password',

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/.aiox-core/product/templates/engine/elicitation.jsView on unpkg · L26

27 array: 'input',

28 };

30 return typeMap[type] || 'input';

31}

33/**

34 * Create an inquirer question from a template variable

35 * @param {Object} variable - Template variable definition

36 * @param {Object} context - Existing context values

37 * @returns {Object} Inquirer question configuration

38 */

39function createQuestion(variable, context = {}) {

40 const question = {

41 type: mapQuestionType(variable.type),

42 name: variable.name,

43 message: variable.prompt,

44 default: context[variable.name] ?? variable.default,

45 };

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView file

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = payload_in_excluded_dir sizeBytes = 15750 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = build_helper sizeBytes = 15750 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

templates/.aiox-core/product/data/supabase-patterns.mdView file

Lines 52-106markdown

52export const supabaseAdmin = createClient<Database>(

53 process.env.SUPABASE_URL!,

54 process.env.SUPABASE_SERVICE_ROLE_KEY!,

55 {

56 auth: {

57 autoRefreshToken: false,

58 persistSession: false

59 }

60 }

61)

62```

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView file

Lines 674-714markdown

674import { RouterTestingModule } from '@angular/router/testing';

675import { AuthService } from './auth.service';

676import { UserBuilder } from '@test/builders/user.builder';

677

678describe('AuthService', () => {

679 let service: AuthService;

680 let http: HttpTestingController;

681

682 beforeEach(() => {

683 TestBed.configureTestingModule({

684 imports: [HttpClientTestingModule, RouterTestingModule],

685

Source & flagged code

6 flagged · loading source

templates/.aiox-core/product/templates/engine/elicitation.jsView file

26patternName = generic_password severity = medium line = 26 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/.aiox-core/product/templates/engine/elicitation.jsView on unpkg · L26

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView file

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = payload_in_excluded_dir sizeBytes = 15750 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = build_helper sizeBytes = 15750 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

templates/.aiox-core/product/data/supabase-patterns.mdView file

72patternName = generic_password severity = medium line = 72 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/product/data/supabase-patterns.md

templates/.aiox-core/product/data/supabase-patterns.mdView on unpkg · L72

86patternName = generic_password severity = medium line = 86 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/product/data/supabase-patterns.md

templates/.aiox-core/product/data/supabase-patterns.mdView on unpkg · L86

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView file

694patternName = generic_password severity = medium line = 694 matchedText = const lo... });

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/data/tech-presets/angular-nestjs.md

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView on unpkg · L694

Findings

1 High6 Medium1 Low

HighPayload In Excluded Dirtemplates/.opencode/skills/aws-advisor/scripts/cost_considerations.py

MediumSecret Patterntemplates/.aiox-core/product/templates/engine/elicitation.js

MediumShips Build Helpertemplates/.opencode/skills/aws-advisor/scripts/cost_considerations.py

MediumStructural Risk Force Deep Review

MediumSecret Patterntemplates/.aiox-core/product/data/supabase-patterns.md

MediumSecret Patterntemplates/.aiox-core/data/tech-presets/angular-nestjs.md

LowFilesystem

Source & flagged code

6 flagged

templates/.aiox-core/product/templates/engine/elicitation.jsView file

Lines 6-46javascript

6 * @version 2.0.0

7 */

9'use strict';

11const inquirer = require('inquirer');

13/**

14 * Map template variable types to inquirer question types

15 * @param {string} type - Template variable type

16 * @returns {string} Inquirer question type

17 */

18function mapQuestionType(type) {

19 const typeMap = {

20 string: 'input',

21 text: 'editor',

22 number: 'number',

23 boolean: 'confirm',

24 choice: 'list',

25 multichoice: 'checkbox',

26 password: 'password',

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/.aiox-core/product/templates/engine/elicitation.jsView on unpkg · L26

27 array: 'input',

28 };

30 return typeMap[type] || 'input';

31}

33/**

34 * Create an inquirer question from a template variable

35 * @param {Object} variable - Template variable definition

36 * @param {Object} context - Existing context values

37 * @returns {Object} Inquirer question configuration

38 */

39function createQuestion(variable, context = {}) {

40 const question = {

41 type: mapQuestionType(variable.type),

42 name: variable.name,

43 message: variable.prompt,

44 default: context[variable.name] ?? variable.default,

45 };

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView file

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = payload_in_excluded_dir sizeBytes = 15750 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = build_helper sizeBytes = 15750 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

templates/.aiox-core/product/data/supabase-patterns.mdView file

Lines 52-106markdown

52export const supabaseAdmin = createClient<Database>(

53 process.env.SUPABASE_URL!,

54 process.env.SUPABASE_SERVICE_ROLE_KEY!,

55 {

56 auth: {

57 autoRefreshToken: false,

58 persistSession: false

59 }

60 }

61)

62```

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView file

Lines 674-714markdown

674import { RouterTestingModule } from '@angular/router/testing';

675import { AuthService } from './auth.service';

676import { UserBuilder } from '@test/builders/user.builder';

677

678describe('AuthService', () => {

679 let service: AuthService;

680 let http: HttpTestingController;

681

682 beforeEach(() => {

683 TestBed.configureTestingModule({

684 imports: [HttpClientTestingModule, RouterTestingModule],

685