registry / @minimax-ai/code / 0.2.2
@minimax-ai/code@0.2.2
Minimax Code — terminal coding agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe only automatic lifecycle script verifies the bundled SQLite addon and does not mutate agent control files, harvest credentials, or fetch a remote payload. Shell use in the PDF skill is limited to loading Playwright when that script is run by the user.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm postinstall, or a user explicitly running the PDF render script.
Impact
A failed native check sets a non-zero exit code and prints compatibility guidance. The PDF helper writes a user-chosen PDF and may download Chromium only after the user runs that script.
Mechanism
Postinstall probes the local Node and glibc environment and opens an in-memory SQLite connection. The PDF helper starts Playwright and, if Chromium is missing, runs npx playwright install chromium.
AI rationale
The only automatic lifecycle script verifies the bundled SQLite addon and does not mutate agent control files, harvest credentials, or fetch a remote payload. Shell use in the PDF skill is limited to loading Playwright when that script is run by the user.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the mcode bin and a postinstall script that only runs verify-native-install.mjs.
- The postinstall verifier checks Node and glibc compatibility, then loads optional better-sqlite3 and runs an in-memory SELECT.
- assets/skills/pdf/scripts/render_html.cjs is a user-run PDF helper that loads Playwright and may install Chromium only if launch fails.
Evidence against
- No preinstall hook, self-dependency, credential export, or install-time writes to foreign agent config paths were found.
- Declared dependencies are clipboard, ripgrep, and optional better-sqlite3.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.postinstall = node ./verify-native-install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgassets/skills/pdf/scripts/render_html.cjsView file
95function loadPlaywright() {
L96: const { execSync } = require('child_process');
L97: try {
High
Child Process
Package source references child process execution.
assets/skills/pdf/scripts/render_html.cjsView on unpkg · L95127stdio: 'inherit',
L128: shell: true,
L129: });
High
Shell
Package source references shell execution.
assets/skills/pdf/scripts/render_html.cjsView on unpkg · L127Findings
4 High8 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processassets/skills/pdf/scripts/render_html.cjs
HighShellassets/skills/pdf/scripts/render_html.cjs
HighRuntime Package Installassets/skills/pdf/scripts/render_html.cjs
MediumDynamic Requireassets/skills/pdf/scripts/render_html.cjs
MediumEnvironment Vars
MediumShips Native Binarynative/darwin/prebuilds/darwin-x64/darwin-modifiers.node
MediumShips Wasm Modulephoton_rs_bg.wasm
MediumShips Build Helperassets/skills/llm-call/scripts/llm_call.py
MediumOversized Source Filecli.js
MediumOversized Cli Entrypointcli.js
Medium
Affected versions and remediation
This report applies to @minimax-ai/code@0.2.2.
See all versions of @minimax-ai/code for other recorded verdicts.
- Review the evidence and your use of @minimax-ai/code@0.2.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.