registry / @remixmate/cli / 0.9.74
@remixmate/cli@0.9.74
AI media generation skills for Claude Code / Codex — 12 skills covering image, video, voice, digital human, web screenshot, web recording, script, template registry, rendering, Jianying export, and video deconstruction.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe manifest has no lifecycle hooks, and the reviewed agent installation is an explicit command that copies package-owned skills. The scanner’s process and network signals resolve to user-directed execution, environment diagnostics, and device authorization; inspected source does not establish exfiltration or other attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the install, doctor, exec, or login command.
Impact
No unconsented package mutation, command-output exfiltration, or unrelated credential transfer was established.
Mechanism
Install copies bundled skills into selected agent skill directories; doctor probes fixed commands and backend reachability; exec launches the command supplied by the user; login contacts the configured backend for device authorization.
AI rationale
The manifest has no lifecycle hooks, and the reviewed agent installation is an explicit command that copies package-owned skills. The scanner’s process and network signals resolve to user-directed execution, environment diagnostics, and device authorization; inspected source does not establish exfiltration or other attack behavior.
Evidence
dist/install.js
Network endpoints1
api.remixmate.ai/api
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares the CLI entrypoints and has no lifecycle scripts.
- The package’s agent installer copies bundled skills into selected agent skill directories and records what it installed.
- The agent installation and removal operations are dispatched as explicit CLI commands.
- The doctor command runs fixed environment probes and sends a backend reachability request; inspected code does not send command output with that request.
- The exec command spawns the command supplied after its explicit separator and inherits standard I/O.
- Device authorization posts its request data to the configured backend; the default backend is the package service.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/exec.jsView file
1var f=Object.defineProperty;var c=(e,r)=>f(e,"name",{value:r,configurable:!0});import{spawn as u}from"node:child_process";import{parseArgv as l}from"./argv.js";import{EXIT as t}fro...
L2: `;async function _(e){const r=e.indexOf("--");if(r===-1||r===e.length-1)return process.stderr.write(`❌ exec 需要一个 \`--\` 分隔符与要执行的命令。
High
dist/doctor.jsView file
1var T=Object.defineProperty;var i=(n,s)=>T(n,"name",{value:s,configurable:!0});import{spawnSync as _}from"node:child_process";import{resolveApiBaseUrl as $}from"./http.js";import{E...
L2: `)[0]||null}catch{return null}}i(g,"probe");async function O(n){const s=new AbortController,t=setTimeout(()=>s.abort(),8e3);try{const o=await fetch(`${n}/auth/device/code`,{method:...
L3: `);const h=x(d);h&&process.stdout.write(`
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/doctor.jsView on unpkg · L1Findings
1 Critical4 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/auth/device-flow.js
HighChild Processdist/exec.js
HighShell
HighCommand Output Exfiltrationdist/doctor.js
HighTrigger Reachable Command Output Exfiltrationdist/doctor.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/web-screenshot/scripts/_media_screenshot/bootstrap.py
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @remixmate/cli@0.9.74.
See all versions of @remixmate/cli for other recorded verdicts.
- Review the evidence and your use of @remixmate/cli@0.9.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.