@tekmidian/pai@0.15.0

PAI Knowledge OS — Personal AI Infrastructure with federated memory and project management

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 93 file(s), 1.42 MB of source, external domains: api.todoist.com, app.todoist.com, github.com, json-schema.org, ntfy.sh, www.apple.com

Source & flagged code

8 flagged

dist/pick-r95zvydr.mjsView file

Lines 1-38javascript

1import { a as openRegistry, i as indexProject, n as indexAll, t as embedChunks } from "./sync-uPR4g438.mjs";

2import { _ as warn, a as fmtDate, c as ok, d as scaffoldProjectDirs, f as shortenPath, i as err, l as renderTable, m as slugify, n as dim$1, o as header, p as slugFromPath, r as encodeDir, s as now, t as bold$1, u as resolvePath } from "./utils-CqqgB0dH.mjs";

3import { a as slugify$1, i as parseSessionFilename } from "./migrate-B02wDDgS.mjs";

4import { n as ensurePaiMarker } from "./pai-marker-HVBwwBW-.mjs";

5import { n as openFederation } from "./db-CmYbAVCD.mjs";

6import { n as populateSlugs, r as searchMemory } from "./search-HcdKtMla.mjs";

7import { n as formatDetection, r as formatDetectionJson, t as detectProject } from "./detect-KjycLtXM.mjs";

8import { a as resolveHome, c as upsertSession, n as cmdScan, o as saveScanConfig, r as loadScanConfig, s as upsertProject, t as extractAndStoreTriples } from "./kg-extraction-C8DEUHTS.mjs";

9import { t as createStorageBackend } from "./factory-Q88X1bAN.mjs";

10import { t as PaiClient } from "./ipc-client-CoyUHPod.mjs";

11import { a as expandHome, c as UNROUTED, i as ensureConfigDir, n as CONFIG_FILE$2, o as loadConfig, s as OWNER_LABEL_PREFIX, t as CONFIG_DIR } from "./config-C8m-tPhP.mjs";

12import { s as kgQuery } from "./kg-entity-LXblD7LZ.mjs";

13import { a as renderDedupedSessions, c as revealItermSession, d as fmtAge, f as resolveSessionByNameOrId, i as normalizeName$1, l as sendToSession, o as callAiBroker, p as scanSessions, r as buildDeduped, s as fetchLiveSessions, u as printExitDir } from "./main-resolver-uFxNiDy7.mjs";

14import { appendFileSync, chmodSync, copyFileSync, createReadStream, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";

15import { homedir, platform } from "node:os";

16import { basename, dirname, join, relative, resolve } from "node:path";

17import chalk from "chalk";

18import { fileURLToPath } from "node:url";

19import { execFile, execSync, spawn, spawnSync } from "node:child_process";

20import { createInterface } from "node:readline";

High

Child Process

Package source references child process execution.

dist/pick-r95zvydr.mjsView on unpkg · L18

21import { createConnection } from "net";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/pick-r95zvydr.mjsView on unpkg · L18

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/pick-r95zvydr.mjsView on unpkg · L18

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/pick-r95zvydr.mjsView on unpkg · L18

23//#region src/session/promote.ts

24/**

25* Derive a human-readable project name from a session note filename.

26* "0042 - 2026-02-24 - Dark Mode Implementation.md" → "Dark Mode Implementation"

27*/

28function deriveNameFromFilename(filename) {

29 const base = basename(filename, ".md");

30 const match = base.match(/^\d+ - \d{4}-\d{2}-\d{2} - (.+)$/);

31 return match ? match[1] : base;

32}

33/**

34* Extract the first N H2 (##) section headings from markdown content.

35*/

36function extractH2Headings(content, limit = 2) {

37 const headings = [];

38 for (const m of content.matchAll(/^## .+$/gm)) {

Lines 2422-2462javascript

2422 });

2423 } catch (e) {

2424 results.push({

2425 label: "Federation DB (legacy)",

2426 path: dest,

2427 size: "-",

2428 status: warn(`skipped: ${e}`)

2429

dist/daemon-mcp/index.mjsView file

Lines 120-160javascript

120 configurable: true

121 });

122}

123function mergeDefs(...defs) {

124 const mergedDescriptors = {};

125

scripts/build-docs.mjsView file

Lines 315-355javascript

315

316 out.push("## All commands", "");

317 out.push("| Command | Description |", "|---------|-------------|");

318 for (const c of flat) {

tab-color-command.shView file

•path = tab-color-command.sh kind = build_helper sizeBytes = 860 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tab-color-command.shView on unpkg

Source & flagged code

8 flagged · loading source

dist/pick-r95zvydr.mjsView file

18import { fileURLToPath } from "node:url"; L19: import { execFile, execSync, spawn, spawnSync } from "node:child_process"; L20: import { createInterface } from "node:readline";

High

Child Process

Package source references child process execution.

dist/pick-r95zvydr.mjsView on unpkg · L18

2442], L2443: shell: true L2444: });

High

Shell

Package source references shell execution.

dist/pick-r95zvydr.mjsView on unpkg · L2442

18Cross-file remote execution chain: dist/pick-r95zvydr.mjs spawns dist/daemon-mcp/index.mjs; helper contains network access plus dynamic code execution. L18: import { fileURLToPath } from "node:url"; L19: import { execFile, execSync, spawn, spawnSync } from "node:child_process"; L20: import { createInterface } from "node:readline"; L21: import { createConnection } from "net"; L22: ... L183: function findProjectNotesDirs(project) { L184: const claudeProjects = join(homedir(), ".claude", "projects"); L185: if (!existsSync(claudeProjects)) return []; ... L632: * Returns the new path on success, or undefined if ambiguous/not found. L633: * Prints all messages to stderr (safe for shell-wrapper stdout capture). L634: */ L635: function tryRecoverMovedProject(db, project) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/pick-r95zvydr.mjsView on unpkg · L18

18Trigger-reachable persistence chain: manifest.bin -> dist/cli/index.mjs -> dist/pick-r95zvydr.mjs L18: import { fileURLToPath } from "node:url"; L19: import { execFile, execSync, spawn, spawnSync } from "node:child_process"; L20: import { createInterface } from "node:readline"; L21: import { createConnection } from "net"; L22: ... L183: function findProjectNotesDirs(project) { L184: const claudeProjects = join(homedir(), ".claude", "projects"); L185: if (!existsSync(claudeProjects)) return []; ... L632: * Returns the new path on success, or undefined if ambiguous/not found. L633: * Prints all messages to stderr (safe for shell-wrapper stdout capture). L634: */ L635: function tryRecoverMovedProject(db, project) {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/pick-r95zvydr.mjsView on unpkg · L18

18import { fileURLToPath } from "node:url"; L19: import { execFile, execSync, spawn, spawnSync } from "node:child_process"; L20: import { createInterface } from "node:readline"; L21: import { createConnection } from "net"; L22: ... L183: function findProjectNotesDirs(project) { L184: const claudeProjects = join(homedir(), ".claude", "projects"); L185: if (!existsSync(claudeProjects)) return []; ... L632: * Returns the new path on success, or undefined if ambiguous/not found. L633: * Prints all messages to stderr (safe for shell-wrapper stdout capture). L634: */ L635: function tryRecoverMovedProject(db, project) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/pick-r95zvydr.mjsView on unpkg · L18

dist/daemon-mcp/index.mjsView file

140try { L141: new Function(""); L142: return true;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/daemon-mcp/index.mjsView on unpkg · L140

scripts/build-docs.mjsView file

335L336: const mod = await import(pathToFileURL(PROGRAM_MJS).href); L337: if (typeof mod.buildProgram !== "function") {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/build-docs.mjsView on unpkg · L335

tab-color-command.shView file

•path = tab-color-command.sh kind = build_helper sizeBytes = 860 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tab-color-command.shView on unpkg

Findings

4 High6 Medium6 Low

HighChild Processdist/pick-r95zvydr.mjs

HighShelldist/pick-r95zvydr.mjs

HighCross File Remote Execution Contextdist/pick-r95zvydr.mjs

HighTrigger Reachable Persistencedist/pick-r95zvydr.mjs

MediumDynamic Requirescripts/build-docs.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/pick-r95zvydr.mjs

MediumShips Build Helpertab-color-command.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/daemon-mcp/index.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @tekmidian/pai@0.15.0.

See all versions of @tekmidian/pai for other recorded verdicts.

Review the evidence and your use of @tekmidian/pai@0.15.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-01 11:34:58.842Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.