registry / @superdoc/cli-darwin-x64 / 0.49.0
@superdoc/cli-darwin-x64@0.49.0
SuperDoc CLI binary for macOS x64. Selected automatically by @superdoc/cli; do not install it directly.
AI Security Review
scanned 19h ago · by lpm-firewall-aiThe manifest and bundled tool prompts match a platform-specific DOCX editing CLI, and no lifecycle scripts or concrete attack behavior were identified. The native implementation is only partially visible, but the available evidence does not indicate abuse.
Static reason
No blocking static signals were detected.
Trigger
A user invokes the `superdoc` command.
Impact
No credential theft, unsolicited install action, persistence, or destructive behavior was identified in the readable evidence.
Mechanism
The manifest exposes a native CLI, and its bundled prompts describe DOCX editing workflows with saving as a session step.
AI rationale
The manifest and bundled tool prompts match a platform-specific DOCX editing CLI, and no lifecycle scripts or concrete attack behavior were identified. The native implementation is only partially visible, but the available evidence does not indicate abuse.
Network endpoints1
api.liveblocks.io
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a macOS x64 SuperDoc CLI binary selected automatically by @superdoc/cli.
- The manifest maps the `superdoc` command to `bin/superdoc` and ships the `bin` directory.
- The bundled prompt describes DOCX read and edit tools, with saving as a session step.
Evidence against
- The native executable is 89 MB, and its readable analysis contains only bounded embedded-source windows, so its full behavior could not be traced.
- The readable native-source view contains an `api.liveblocks.io` string, but the available excerpt does not establish a network call or its trigger.
Behavioral surface
CopyleftLicense
Source & flagged code
7 flaggedbin/superdocView file
•path = bin/superdoc
kind = native_binary
sizeBytes = 89874224
magicHex = [redacted]
Medium
bin/assets/blank.docxView file
•path = bin/assets/blank.docx
kind = high_entropy_blob
sizeBytes = 12520
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
bin/assets/blank.docxView on unpkg•path = bin/assets/blank.docx
kind = compressed_blob
sizeBytes = 12520
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
bin/assets/blank.docxView on unpkgFindings
1 High3 Medium5 Low
HighShips High Entropy Blobbin/assets/blank.docx
MediumShips Native Binarybin/superdoc
MediumShips Compressed Blobbin/assets/blank.docx
MediumStructural Risk Force Deep Review
LowNested Archive Needs Inspectionbin/assets/blank.docx
LowCopyleft License
LowAi Review Evidencepackage.json
LowAi Review Evidencepackage.json
LowAi Review Evidencebin/tools/system-prompt-mcp.md
Affected versions and remediation
This report applies to @superdoc/cli-darwin-x64@0.49.0.
See all versions of @superdoc/cli-darwin-x64 for other recorded verdicts.
- Review the evidence and your use of @superdoc/cli-darwin-x64@0.49.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.