registry  /  @slycode/create-slycode  /  0.4.1

@slycode/create-slycode@0.4.1

Create a new SlyCode workspace

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireFilesystem
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 33.4 KB of source, external domains: 127.0.0.1, elevenlabs.io, en.wikipedia.org, github.com, nodejs.org, platform.openai.com

Source & flagged code

3 flagged · loading source
lib/index.jsView file
39const readline = __importStar(require("readline")); L40: const child_process_1 = require("child_process"); L41: const USAGE = `
High
Child Process

Package source references child process execution.

lib/index.jsView on unpkg · L39
39const readline = __importStar(require("readline")); L40: const child_process_1 = require("child_process"); L41: const USAGE = ` L42: Usage: npx create-slycode [directory] L43:
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/index.jsView on unpkg · L39
bin/create-slycode.jsView file
11L12: const { main } = require('../lib/index'); L13: main(process.argv.slice(2)).catch((err) => {
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/create-slycode.jsView on unpkg · L11

Findings

2 High2 Medium4 Low
HighChild Processlib/index.js
HighRuntime Package Installlib/index.js
MediumDynamic Requirebin/create-slycode.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings