registry / @marcelojrrangel/create-aiox-core / 1.0.0

@marcelojrrangel/create-aiox-core@1.0.0

Scaffold a new AIOX Core project with native OpenCode integration — 13 agents, 215+ tasks, 11 skills, and orchestrated workflows

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 24.3 KB of source

Source & flagged code

6 flagged

templates/.aiox-core/product/templates/engine/elicitation.jsView file

Lines 6-46javascript

6 * @version 2.0.0

7 */

9'use strict';

11const inquirer = require('inquirer');

Source & flagged code

6 flagged · loading source

templates/.aiox-core/product/templates/engine/elicitation.jsView file

26patternName = generic_password severity = medium line = 26 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/.aiox-core/product/templates/engine/elicitation.jsView on unpkg · L26

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView file

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = payload_in_excluded_dir sizeBytes = 15750 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

•path = templates/.opencode/skills/aws-advisor/scripts/cost_considerations.py kind = build_helper sizeBytes = 15750 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.opencode/skills/aws-advisor/scripts/cost_considerations.pyView on unpkg

templates/.aiox-core/product/data/supabase-patterns.mdView file

72patternName = generic_password severity = medium line = 72 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/product/data/supabase-patterns.md

templates/.aiox-core/product/data/supabase-patterns.mdView on unpkg · L72

86patternName = generic_password severity = medium line = 86 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/product/data/supabase-patterns.md

templates/.aiox-core/product/data/supabase-patterns.mdView on unpkg · L86

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView file

694patternName = generic_password severity = medium line = 694 matchedText = const lo... });

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/data/tech-presets/angular-nestjs.md

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView on unpkg · L694

Findings

1 High6 Medium1 Low

HighPayload In Excluded Dirtemplates/.opencode/skills/aws-advisor/scripts/cost_considerations.py

MediumSecret Patterntemplates/.aiox-core/product/templates/engine/elicitation.js

MediumShips Build Helpertemplates/.opencode/skills/aws-advisor/scripts/cost_considerations.py

MediumStructural Risk Force Deep Review

MediumSecret Patterntemplates/.aiox-core/product/data/supabase-patterns.md

MediumSecret Patterntemplates/.aiox-core/data/tech-presets/angular-nestjs.md

LowFilesystem

templates/.aiox-core/product/data/supabase-patterns.mdView file

Lines 52-106markdown

52export const supabaseAdmin = createClient<Database>(

53 process.env.SUPABASE_URL!,

54 process.env.SUPABASE_SERVICE_ROLE_KEY!,

55 {

56 auth: {

57 autoRefreshToken: false,

58 persistSession: false

59 }

60 }

61)

62```

64---

66## AUTHENTICATION PATTERNS

68### Sign Up with Email

69```typescript

70const { data, error } = await supabase.auth.signUp({

71 email: 'user@example.com',

72 password: 'secure-password',

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/product/data/supabase-patterns.md

templates/.aiox-core/product/data/supabase-patterns.mdView on unpkg · L72

73 options: {

74 data: {

75 full_name: 'User Name',

76 // Additional user metadata

77 }

78 }

79})

80```

82### Sign In

83```typescript

84const { data, error } = await supabase.auth.signInWithPassword({

85 email: 'user@example.com',

86 password: 'secure-password'

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/product/data/supabase-patterns.md

templates/.aiox-core/product/data/supabase-patterns.mdView on unpkg · L86

87})

88```

90### OAuth Provider

91```typescript

92const { data, error } = await supabase.auth.signInWithOAuth({

93 provider: 'github',

94 options: {

95 redirectTo: `${window.location.origin}/auth/callback`

96 }

97})

98```

100### Session Management

101```typescript

102// Get current session

103const { data: { session } } = await supabase.auth.getSession()

104

105// Listen to auth changes

106supabase.auth.onAuthStateChange((event, session) => {

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView file

Lines 674-714markdown

674import { RouterTestingModule } from '@angular/router/testing';

675import { AuthService } from './auth.service';

676import { UserBuilder } from '@test/builders/user.builder';

677

678describe('AuthService', () => {

679 let service: AuthService;

680 let http: HttpTestingController;

681

682 beforeEach(() => {

683 TestBed.configureTestingModule({

684 imports: [HttpClientTestingModule, RouterTestingModule],

685 });

686 service = TestBed.inject(AuthService);

687 http = TestBed.inject(HttpTestingController);

688 });

689

690 afterEach(() => http.verify());

691

692 it('should set user signal after successful login', async () => {

693 const user = new UserBuilder().withEmail('test@test.com').build();

694 const loginPromise = service.login({ email: 'test@test.com', password: 'Pass123!' });

Medium

Secret Pattern

Hardcoded password in templates/.aiox-core/data/tech-presets/angular-nestjs.md

templates/.aiox-core/data/tech-presets/angular-nestjs.mdView on unpkg · L694

695

696 // Cookie-based auth: backend sets HttpOnly cookie, response only carries user data

697 http.expectOne('/api/auth/login').flush({ user });

698

699 await loginPromise;

700 expect(service.user()).toEqual(user);

701 expect(service.isAuthenticated()).toBe(true);

702 });

703});

704```

705

706---

707

708## Token Economy Strategies

709

710### Strategy 1: Mostrar o módulo de referência

711

712```text

713// BOM: ~300 tokens mostrando o padrão

714"Crie ProductsModule idêntico ao AuthModule: