registry  /  @testmuai/kane-cli  /  0.4.9

@testmuai/kane-cli@0.4.9

KaneAI Terminal UI — browser automation testing agent

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 102 file(s), 1.56 MB of source, external domains: 127.0.0.1, accounts.lambdatest.com, api-hyperexecute.lambdatest.com, api-stage-hyperexecute.lambdatestinternal.com, api.github.com, api.lambdatest.com, auteur-stage-automind.lambdatestinternal.com, auth.lambdatest.com, dd-proxy.lambdatest.com, dl.google.com, example.com, feross.org, github.com, kaneai-api.lambdatest.com, kaneai-playground.lambdatest.io, reactjs.org, registry.npmjs.org, sheetjs.com, stage-accounts.lambdatestinternal.com, stage-api.lambdatestinternal.com, stage-auth.lambdatestinternal.com, stage-test-manager-api.lambdatestinternal.com, stage-test-manager.lambdatestinternal.com, test-manager-api.lambdatest.com, test-manager.lambdatest.com, www.google.com, www.testmuai.com

Source & flagged code

3 flagged · loading source
dist/index.jsView file
11(Did you mean one of ${i.join(", ")}?)`:i.length===1?` L12: (Did you mean ${i[0]}?)`:""}On.suggestSimilar=gi});var Dn=me(Pn=>{"use strict";var wi=be("events").EventEmitter,mt=be("child_process"),ie=be("path"),ft=be("fs"),T=be("process"),{Ar... L13: - specify the name in Command constructor or using .name()`);return n=n||{},n.isDefault&&(this._defaultCommandName=e._name),(n.noHelp||n.hidden)&&(e._hidden=!0),this._registerComma...
High
Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L11
2Cross-file remote execution chain: dist/index.js spawns dist/chunk-BH6EP2LD.js; helper contains network access plus dynamic code execution. L2: import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: import{a as zt,b as vn,c as bn,d as yn}from"./chunk-XA7UFTB7.js";import"./chunk-JQXARCVE.js";import{i as En}from"./chunk-6PBX7QI7.js";import"./chunk-3MSXQU2C.js";import"./chunk-IO3... L4: `).replace(/^/gm," ".repeat(o))}let c=[`Usage: ${n.commandUsage(e)}`,""],m=n.commandDescription(e);m.length>0&&(c=c.concat([n.wrap(m,t,0),""]));let u=n.visibleArguments(e).map(d=>a... ... L11: (Did you mean one of ${i.join(", ")}?)`:i.length===1?` L12: (Did you mean ${i[0]}?)`:""}On.suggestSimilar=gi});var Dn=me(Pn=>{"use strict";var wi=be("events").EventEmitter,mt=be("child_process"),ie=be("path"),ft=be("fs"),T=be("process"),{Ar... L13: - specify the name in Command constructor or using .name()`);return n=n||{},n.isDefault&&(this._defaultCommandName=e._name),(n.noHelp||n.hidden)&&(e._hidden=!0),this._registerComma... ... L24: `)}),this}_outputHelpIfRequested(e){let n=this._getHelpOption();n&&e.find(t=>n.is(t))&&(this.outputHelp(),this._exit(0,"commander.helpDispla…
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L2
dist/chunk-PUU7A26K.jsView file
3`),{global:o,bodyStartLine:n}=X(e,s),{title:r,steps:i}=Z(e,s,n);return{path:e,title:r,global:o,steps:i}}function X(e,t){if(t[0]?.trim()!=="---")return{global:{},bodyStartLine:0};le... L4: `),n;try{n=k(o)??{}}catch(r){throw new u(`invalid YAML in frontmatter: ${r.message}`,e,1)}if(M(e,n,"frontmatter",1),n.on_lock_conflict!==void 0){let r=n.on_lock_conflict;if(r!=="re... L5: `);try{n=k(h)??{}}catch(I){throw new u(`invalid YAML in step config: ${I.message}`,e,r)}o=f+1}let i=te(s.slice(o)),a=i.filter(l=>l.trim()!=="");if(a.length>0&&/^@session\s+/.test(a... ... L9: `),o="passed";if(s[0]?.trim()==="---")for(let r=1;r<s.length&&s[r].trim()!=="---";r++){let i=/^status:\s+(passed|failed|interrupted)\s*$/.exec(s[r]);i&&(o=i[1])}let n=[];for(let r=... L10: `,"utf8"),e.codeExportDir){let n=e.codeExportLanguage??"python",r=S(t,`playwright-${n}-code`);try{W(e.codeExportDir,r)}catch(i){process.stderr.write(`warn: codegen copy failed: ${i... L11: `)}}}export{Be as a,x as b,w as c,Je as d,v as e,W as f,St as g};
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-PUU7A26K.jsView on unpkg · L3

Findings

2 High3 Medium5 Low
HighChild Processdist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowWeak Cryptodist/chunk-PUU7A26K.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings