registry / @markus-global/cli / 0.8.4
@markus-global/cli@0.8.4
Markus — AI Digital Workforce Platform
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
CopyleftLicense
Oversized source lightweight scan
dist/markus.mjs14.7 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellUrlStringsapi.anthropic.comgithub.commarkus.globalwww.markus.global
dist/web-ui/assets/index-DZjXJ0HZ.js2.34 MB file, sampled 256 KB
NetworkHighEntropyStrings
Source & flagged code
6 flaggeddist/utils/browser.jsView file
4*/
L5: import { exec } from 'node:child_process';
L6: import { get as httpGet } from 'node:http';
High
Child Process
Package source references child process execution.
dist/utils/browser.jsView on unpkg · L44*/
L5: import { exec } from 'node:child_process';
L6: import { get as httpGet } from 'node:http';
L7: import { platform } from 'node:os';
L8: export function openBrowser(url) {
L9: if (process.env['NO_BROWSER'])
L10: return;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/utils/browser.jsView on unpkg · L4dist/commands/update.jsView file
40stdio: 'inherit',
L41: shell: true,
L42: });
High
Shell
Findings
5 High4 Medium5 Low
HighChild Processdist/utils/browser.js
HighShelldist/commands/update.js
HighSame File Env Network Executiondist/utils/browser.js
HighShips High Entropy Blobdist/web-ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2
HighOversized Source Filedist/web-ui/assets/index-DZjXJ0HZ.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Cli Entrypointdist/markus.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
Affected versions and remediation
This report applies to @markus-global/cli@0.8.4.
See all versions of @markus-global/cli for other recorded verdicts.
- Review the evidence and your use of @markus-global/cli@0.8.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.