registry  /  @skippr/live-agent-sdk  /  0.80.0

@skippr/live-agent-sdk@0.80.0

[![Website](https://img.shields.io/badge/Website-skippr.ai-blue)](https://skippr.ai) [![NPM Version](https://img.shields.io/npm/v/%40skippr%2Flive-agent-sdk?color=red)](https://www.npmjs.com/package/@skippr/live-agent-sdk)

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.57 MB of source, external domains: aomediacodec.github.io, github.com, react.dev, reactjs.org, specialist.skippr.ai, tailwindcss.com, www.w3.org

Source & flagged code

3 flagged · loading source
dist/skippr-sdk.jsView file
241${z} L242: `):M+=W[0]}return M+=x.slice(Y),M}let $=muf(f,l||location.href);return $=await y($,l||location.href,0),$}function Iuf(f){if(!f)return[];let l=[],u=f.split(",").map((w)=>w.trim()).f... L243: `:case"\r":case"\t":case" ":continue;default:throw Error("invalid base64 string.")}switch(r){case 0:$=y,r=1;break;case 1:u[w++]=$<<2|(y&48)>>4,$=y,r=2;break;case 2:u[w++]=($&15)<<4...
High
Child Process

Package source references child process execution.

dist/skippr-sdk.jsView on unpkg · L241
226Learn more: https://react.dev/warnings/version-mismatch`))}(),typeof Map==="function"&&Map.prototype!=null&&typeof Map.prototype.forEach==="function"&&typeof Set==="function"&&Set.... L227: You might need to use a local HTTP server (instead of file://): https://react.dev/link/react-devtools-faq`:""),"font-weight:bold")}y7.createRoot=function(t,p){if(!i(t))throw Error(... L228: ... L241: ${z} L242: `):M+=W[0]}return M+=x.slice(Y),M}let $=muf(f,l||location.href);return $=await y($,l||location.href,0),$}function Iuf(f){if(!f)return[];let l=[],u=f.split(",").map((w)=>w.trim()).f... L243: `:case"\r":case"\t":case" ":continue;default:throw Error("invalid base64 string.")}switch(r){case 0:$=y,r=1;break;case 1:u[w++]=$<<2|(y&48)>>4,$=y,r=2;break;case 2:u[w++]=($&15)<<4...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/skippr-sdk.jsView on unpkg · L226
253patternName = generic_password severity = medium line = 253 matchedText = `},l.par...+`\r
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/skippr-sdk.jsView on unpkg · L253

Findings

2 High4 Medium6 Low
HighChild Processdist/skippr-sdk.js
HighSame File Env Network Executiondist/skippr-sdk.js
MediumSecret Patterndist/skippr-sdk.js
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License