Static Scan Results
scanned 8d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStrings
NoLicense
Source & flagged code
1 flagged · loading sourcedist/setup.jsView file
13import * as readline from 'node:readline/promises';
L14: import { stdin as input, stdout as output } from 'node:process';
L15: // ── Paths ─────────────────────────────────────────────────────────────────────
L16: const HOME = homedir();
L17: const CLAUDE_JSON_PATH = join(HOME, '.claude.json');
...
L43: try {
L44: return JSON.parse(readFileSync(path, 'utf8'));
L45: }
...
L64: function writeShellEnv(apiKey, baseUrl) {
L65: for (const rc of [join(HOME, '.zshrc'), join(HOME, '.bashrc')]) {
L66: if (!existsSync(rc))
...
L156: // API key + URL
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/setup.jsView on unpkg · L13Findings
3 Medium4 Low
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/setup.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License