registry / @thedebate/cli / 0.1.1

@thedebate/cli@0.1.1

The Debate CLI — orchestrate multi-AI council debates and consult mentors from the terminal.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 622 KB of source, external domains: stuk.github.io, thedebate.ai

Source & flagged code

2 flagged

dist/cli.jsView file

41* Constructs the CommanderError class L42: * @param {number} exitCode suggested exit code which could be used with process.exit L43: * @param {string} code an id string representing the error ... L1156: var EventEmitter = __require("events").EventEmitter; L1157: var childProcess = __require("child_process"); L1158: var path = __require("path"); ... L1206: this._outputConfiguration = { L1207: writeOut: (str2) => process2.stdout.write(str2), L1208: writeErr: (str2) => process2.stderr.write(str2), ... L1245: * @returns {Command[]} L1246: * @private L1247: */

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L41

5865if (typeof callback !== "function") { L5866: callback = new Function("" + callback); L5867: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/cli.jsView on unpkg · L5865

Source & flagged code

2 flagged · loading source

dist/cli.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code