registry / @skippr/live-agent-sdk / 0.94.0

@skippr/live-agent-sdk@0.94.0

[![Website](https://img.shields.io/badge/Website-skippr.ai-blue)](https://skippr.ai) [![NPM Version](https://img.shields.io/npm/v/%40skippr%2Flive-agent-sdk?color=red)](https://www.npmjs.com/package/@skippr/live-agent-sdk)

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

Manifest

NoLicense

scanned 2 file(s), 1.96 MB of source, external domains: aomediacodec.github.io, github.com, react.dev, reactjs.org, specialist.skippr.ai, tailwindcss.com, www.w3.org

Source & flagged code

3 flagged

dist/skippr-sdk.jsView file

241${Z} L242: `):B+=W[0]}return B+=k.slice(x),B}let o=e2t(t,r||location.href);return o=await m(o,r||location.href,0),o}function Uyt(t){if(!t)return[];let r=[],l=t.split(",").map((u)=>u.trim()).f... L243: `:case"\r":case"\t":case" ":continue;default:throw Error("invalid base64 string.")}switch(y){case 0:o=m,y=1;break;case 1:l[u++]=o<<2|(m&48)>>4,o=m,y=2;break;case 2:l[u++]=(o&15)<<4...

High

Child Process

Package source references child process execution.

dist/skippr-sdk.jsView on unpkg · L241

226Learn more: https://react.dev/warnings/version-mismatch`))}(),typeof Map==="function"&&Map.prototype!=null&&typeof Map.prototype.forEach==="function"&&typeof Set==="function"&&Set.... L227: You might need to use a local HTTP server (instead of file://): https://react.dev/link/react-devtools-faq`:""),"font-weight:bold")}I9.createRoot=function(p,f){if(!A(p))throw Error(... L228: ... L241: ${Z} L242: `):B+=W[0]}return B+=k.slice(x),B}let o=e2t(t,r||location.href);return o=await m(o,r||location.href,0),o}function Uyt(t){if(!t)return[];let r=[],l=t.split(",").map((u)=>u.trim()).f... L243: `:case"\r":case"\t":case" ":continue;default:throw Error("invalid base64 string.")}switch(y){case 0:o=m,y=1;break;case 1:l[u++]=o<<2|(m&48)>>4,o=m,y=2;break;case 2:l[u++]=(o&15)<<4...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/skippr-sdk.jsView on unpkg · L226

253patternName = generic_password severity = medium line = 253 matchedText = `},r.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/skippr-sdk.jsView on unpkg · L253

Source & flagged code

3 flagged · loading source

dist/skippr-sdk.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code