registry / @sunreye/profile-sdk / 2.0.0

@sunreye/profile-sdk@2.0.0

Authoring SDK + CLI for SunReye inverter profiles: define, validate, scaffold, and exercise ProfileData without hardware.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The CLI performs user-invoked profile scaffolding, build output writes, and optional confirmed setup commands; no install-time execution or exfiltration is present.

Static reason

No blocking static signals were detected.

Trigger

Explicit `profile` CLI commands, especially `init`, `upgrade`, or `build`.

Impact

Creates or updates files in the selected project directory; optional dependency installation or Git initialization requires confirmation or a flag.

Mechanism

User-directed local profile scaffolding and build tooling.

Rationale

The package is a Bun-based profile SDK and explicit CLI scaffold/build tool. Its dynamic import, file writes, agent-guide creation, and optional process spawning are constrained to user-invoked commands and show no concrete malicious chain.

Evidence

package.jsondist/index.mjsdist/cli.mjsdist/repo-swIiNjHA.mjsREADME.mdAGENTS.mdCLAUDE.mdindex.jsonprofiles/*.json

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

@sunreye/profile-sdk@2.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code