registry  /  @shumai-one/shumai-agent  /  0.1.3

@shumai-one/shumai-agent@0.1.3

AI worker agent for the shumai media workspace

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 261 KB of source, external domains: api.x.ai, api.xiaomimimo.com, api.z.ai, dotenvx.com, github.com, open.bigmodel.cn, token-plan-ams.xiaomimimo.com, token-plan-cn.xiaomimimo.com, token-plan-sgp.xiaomimimo.com
Oversized source lightweight scan
bin/shumai-agent-app.js5.59 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsCryptoObfuscatedHighEntropyStringsMinifiedUrlStringsapi.x.aiapi.xiaomimimo.comapi.z.aidotenvx.comgithub.comopen.bigmodel.cntoken-plan-ams.xiaomimimo.comtoken-plan-cn.xiaomimimo.comtoken-plan-sgp.xiaomimimo.com

Source & flagged code

2 flagged · loading source
bin/shumai-agent-app.jsView file
•path = bin/shumai-agent-app.js kind = oversized_source_file sizeBytes = 5861751 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

bin/shumai-agent-app.jsView on unpkg
•path = bin/shumai-agent-app.js kind = oversized_cli_entrypoint sizeBytes = 5861751 magicHex = [redacted]
Medium
Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

bin/shumai-agent-app.jsView on unpkg

Findings

1 High3 Medium5 Low
HighOversized Source Filebin/shumai-agent-app.js
MediumEnvironment Vars
MediumOversized Cli Entrypointbin/shumai-agent-app.js
MediumStructural Risk Force Deep Review
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License