registry  /  @tencent-ai/agent-sdk  /  0.3.201

@tencent-ai/agent-sdk@0.3.201

CodeBuddy Code SDK for JavaScript/TypeScript

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 31 file(s), 1.02 MB of source, external domains: api.qrserver.com, bit.ly, github.com, reactjs.org, www.w3.org
Oversized source lightweight scan
cli/dist/codebuddy-headless.js15.5 MB file, sampled 256 KB
EnvironmentVarsObfuscatedMinified
cli/dist/web-ui/assets/index-BGE1J3w8.js2.13 MB file, sampled 256 KB
NetworkObfuscatedHighEntropyStringsUrlStringsapi.qrserver.comwww.w3.org

Source & flagged code

5 flagged · loading source
cli/vendor/genie-trash/linux-arm64View file
•path = cli/vendor/genie-trash/linux-arm64 kind = native_binary sizeBytes = 1052784 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

cli/vendor/genie-trash/linux-arm64View on unpkg
cli/dist/wasm/tree-sitter.wasmView file
•path = cli/dist/wasm/tree-sitter.wasm kind = wasm_module sizeBytes = 190779 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

cli/dist/wasm/tree-sitter.wasmView on unpkg
cli/vendor/shim/sitecustomize.pyView file
•path = cli/vendor/shim/sitecustomize.py kind = build_helper sizeBytes = 25078 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cli/vendor/shim/sitecustomize.pyView on unpkg
cli/dist/web-ui/assets/mfixx-CpAhKOZz.woff2View file
•path = cli/dist/web-ui/assets/mfixx-CpAhKOZz.woff2 kind = high_entropy_blob sizeBytes = 24412 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

cli/dist/web-ui/assets/mfixx-CpAhKOZz.woff2View on unpkg
cli/dist/web-ui/assets/index-BGE1J3w8.jsView file
•path = cli/dist/web-ui/assets/index-BGE1J3w8.js kind = oversized_source_file sizeBytes = 2230022 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

cli/dist/web-ui/assets/index-BGE1J3w8.jsView on unpkg

Findings

3 High6 Medium3 Low
HighObfuscated
HighShips High Entropy Blobcli/dist/web-ui/assets/mfixx-CpAhKOZz.woff2
HighOversized Source Filecli/dist/web-ui/assets/index-BGE1J3w8.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarycli/vendor/genie-trash/linux-arm64
MediumShips Wasm Modulecli/dist/wasm/tree-sitter.wasm
MediumShips Build Helpercli/vendor/shim/sitecustomize.py
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings