registry / @t-digital/n8n-nodes-voice-ai-cloudpbx / 0.2.1

@t-digital/n8n-nodes-voice-ai-cloudpbx@0.2.1

n8n community node for CloudPBX Voice AI – automatically receives call summaries via webhook and extracts tasks and appointments

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Crypto

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 22.8 KB of source, external domains: client.deutschland-lan.de, cpbx-hilfe.deutschland-lan.de

Source & flagged code

1 flagged

dist/credentials/CloudPBXApi.credentials.jsView file

Lines 29-69javascript

29 description: 'Your CloudPBX password',

30 },

31 {

32 displayName: 'Webhook API Key',

33 name: 'webhookApiKey',

34 type: 'string',

35 typeOptions: {

36 password: true,

37 },

38 default: '',

39 required: true,

40 placeholder: 'e.g. my-secret-webhook-key',

41 description: 'The API key that CloudPBX sends in the X-API-Key header. This value must be configured in the CloudPBX Voice AI webhook settings.',

42 },

43 ];

44 this.authenticate = {

45 type: 'generic',

46 properties: {

47 auth: {

48 username: '={{$credentials.username}}',

49 password: '={{$credentials.password}}',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/credentials/CloudPBXApi.credentials.jsView on unpkg · L49

50 },

51 },

52 };

53 this.test = {

54 request: {

55 method: 'GET',

56 url: '=https://client.deutschland-lan.de/com.broadsoft.xsi-actions/v2.0/user/{{$credentials.username}}/profile',

57 },

58 rules: [

59 {

60 type: 'responseCode',

61 properties: {

62 value: 200,

63 message: 'Authentication successful',

64 },

65 },

66 ],

67 };

68 }

69}

Source & flagged code

1 flagged · loading source

dist/credentials/CloudPBXApi.credentials.jsView file

49patternName = generic_password severity = medium line = 49 matchedText = password...}}',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/credentials/CloudPBXApi.credentials.jsView on unpkg · L49

Findings

1 Medium4 Low

MediumSecret Patterndist/credentials/CloudPBXApi.credentials.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/credentials/CloudPBXApi.credentials.jsView file

Lines 29-69javascript

29 description: 'Your CloudPBX password',

30 },

31 {

32 displayName: 'Webhook API Key',

33 name: 'webhookApiKey',

34 type: 'string',

35 typeOptions: {

36 password: true,

37 },

38 default: '',

39 required: true,

40 placeholder: 'e.g. my-secret-webhook-key',

41 description: 'The API key that CloudPBX sends in the X-API-Key header. This value must be configured in the CloudPBX Voice AI webhook settings.',

42 },

43 ];

44 this.authenticate = {

45 type: 'generic',

46 properties: {

47 auth: {

48 username: '={{$credentials.username}}',

49 password: '={{$credentials.password}}',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/credentials/CloudPBXApi.credentials.jsView on unpkg · L49

50 },

51 },

52 };

53 this.test = {

54 request: {

55 method: 'GET',

56 url: '=https://client.deutschland-lan.de/com.broadsoft.xsi-actions/v2.0/user/{{$credentials.username}}/profile',

57 },

58 rules: [

59 {

60 type: 'responseCode',

61 properties: {

62 value: 200,

63 message: 'Authentication successful',

64 },

65 },

66 ],

67 };

68 }

69}