registry / @remixmate/cli / 0.13.6
@remixmate/cli@0.13.6
AI media generation skills for Claude Code / Codex — 12 skills covering image, video, voice, digital human, web screenshot, web recording, script, template registry, rendering, Jianying export, and video deconstruction.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged command execution is used by the explicit `doctor` command for local environment probes, while its backend request checks reachability. The update check retrieves version metadata, and diagnostic output is opt-in; the inspected paths do not show automatic collection or exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
The user invokes `remixmate doctor` or a template command that checks for updates; diagnostics require `AB_DIAGNOSTICS=1`.
Impact
No evidence of command-output or credential exfiltration, unauthorized account actions, or concealed code execution.
Mechanism
Doctor runs local version probes and checks backend reachability. Update checks retrieve package-version metadata. Diagnostics are emitted to stderr when enabled.
AI rationale
The flagged command execution is used by the explicit `doctor` command for local environment probes, while its backend request checks reachability. The update check retrieves version metadata, and diagnostic output is opt-in; the inspected paths do not show automatic collection or exfiltration.
Network endpoints3
api.remixmate.ai/apiregistry.npmjs.orguser-configured Remixmate API base URL
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares a library entry point and CLI binary; it contains no lifecycle scripts.
- The CLI runs `doctor` only when that command is explicitly invoked.
- Doctor’s subprocess helper returns only the first line of a successful probe’s output, and the results are printed locally.
- The update check fetches the package’s latest version from the npm registry.
- Diagnostic output is disabled unless `AB_DIAGNOSTICS=1`.
Evidence against
- Doctor runs local subprocess probes and can contact the configured backend for a reachability check when invoked.
- The CLI handles private tokens, which are used for requests to the configured Remixmate backend.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/exec.jsView file
1var f=Object.defineProperty;var c=(e,r)=>f(e,"name",{value:r,configurable:!0});import{spawn as u}from"node:child_process";import{parseArgv as l}from"./argv.js";import{EXIT as t}fro...
L2: `;async function _(e){const r=e.indexOf("--");if(r===-1||r===e.length-1)return process.stderr.write(`❌ exec 需要一个 \`--\` 分隔符与要执行的命令。
High
dist/update-check.jsView file
1var A=Object.defineProperty;var r=(t,e)=>A(t,"name",{value:e,configurable:!0});import{spawn as k}from"node:child_process";import{mkdirSync as w,readFileSync as m,writeFileSync as x...
L2: `,"utf8")}catch{}}r(f,"writeCache");const p=r((t,e)=>e&&C(e,t)?{current:t,latest:e}:null,"toInfo");function O(t){f({checkedAt:Date.now(),latest:t?.latest??null});try{k(process.exec...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/update-check.jsView on unpkg · L1Findings
5 High4 Medium4 Low
HighChild Processdist/exec.js
HighShell
HighSame File Env Network Executiondist/update-check.js
HighCommand Output Exfiltrationdist/doctor.js
HighTrigger Reachable Command Output Exfiltrationdist/doctor.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/web-screenshot/scripts/_media_screenshot/bootstrap.py
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @remixmate/cli@0.13.6.
See all versions of @remixmate/cli for other recorded verdicts.
- Review the evidence and your use of @remixmate/cli@0.13.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.