registry / @uge/payo / 1.1.2

@uge/payo@1.1.2

CLI tool to generate AI rules and skills for your project

AI Security Review

scanned 8d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an interactive CLI that reads project manifests/layout and writes user-requested AI assistant guidance files, with optional local assistant CLI execution.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs payo/npx @uge/payo and answers prompts

Impact

Creates or backs up guidance/config files in the current project; no install-time execution or exfiltration identified

Mechanism

interactive project config generator with optional local AI CLI invocation

Rationale

The suspicious primitives are package-aligned and user-invoked: local assistant CLI spawning and project file writes implement the documented purpose. Static inspection found no lifecycle execution, credential collection, hidden download, persistence, or exfiltration path.

Evidence

package.jsonREADME.mddist/index.jsAGENTS.mdCLAUDE.md.cursorrules.cursor/rules/**.claude/skills/**.github/copilot-instructions.md.github/instructions/**.agents/skills/**.windsurfrulesAI_RULES.md.payo/**bootstrap-prompt.md

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

dist/index.js imports child_process spawn/spawnSync to invoke local assistant CLIs when selected
dist/index.js can write AI guidance files such as AGENTS.md, CLAUDE.md, .cursorrules, .claude/skills/**

Evidence against

package.json has no install/preinstall/postinstall lifecycle scripts
CLI entrypoint only runs on user invocation via bin payo or main dist/index.js
dist/index.js child_process usage is limited to which/where probes and selected local assistant binaries
dist/index.js constrains generated writes to process.cwd() via RX path check refusing outside-project paths
No credential harvesting or outbound exfiltration endpoint found in package source
README documents the same interactive AI rules/skills generation behavior

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 474 KB of source, external domains: github.com, json-schema.org

Source & flagged code

4 flagged

dist/index.jsView file

Lines 63-103javascript

63`);t.length>1&&n.write(Nv.cursor.up(t.length-1)),n.write(Nv.cursor.to(0)),n.write(Nv.erase.down())},w=(t)=>t.replace(/\.+$/,""),br=(t)=>{let Wr=(performance.now()-t)/1000,Rr=Math.floor(Wr/60),xr=Math.floor(Wr%60);return Rr>0?`[${Rr}m ${xr}s]`:`[${xr}s]`},ir=U.withGuide??rr.withGuide,D$=(t="")=>{N=!0,D=Ab({output:n}),k=w(t),E=performance.now(),ir&&n.write(`${W("gray",B)}

64`);let Wr=0,Rr=0;d(),z=setInterval(()=>{if(b&&k===F)return;H(),F=k;let xr=a(i[Wr]),vn;if(b)vn=`${xr} ${k}...`;else if(r==="timer")vn=`${xr} ${k} ${br(E)}`;else{let e2=".".repeat(Math.floor(Rr)).slice(0,3);vn=`${xr} ${k}${e2}`}let p2=qr(vn,y,{hard:!0,trim:!1});n.write(p2),Wr=Wr+1<i.length?Wr+1:0,Rr=Rr<4?Rr+0.125:0},u)},G$=(t="",Wr=0,Rr=!1)=>{if(!N)return;N=!1,clearInterval(z),H();let xr=Wr===0?W("green",_n):Wr===1?W("red",hb):W("red",yb);k=t??k,Rr||(r==="timer"?n.write(`${xr} ${k} ${br(E)}

65`):n.write(`${xr} ${k}

66`)),V(),D()};return{start:D$,stop:(t="")=>G$(t,0),message:(t="")=>{k=w(t??k)},cancel:(t="")=>G$(t,1),error:(t="")=>G$(t,2),clear:()=>G$("",0,!0),get isCancelled(){return j}}},B3={light:l("─","-"),heavy:l("━","="),block:l("█","#")};var Dn=(r,v)=>r.includes(`

67`)?r.split(`

68`).map((n)=>v(n)).join(`

69`):v(r),z$=(r)=>{let v=(n,g)=>{let $=n.label??String(n.value);switch(g){case"disabled":return`${W("gray",zn)} ${Dn($,(i)=>W("gray",i))}${n.hint?` ${W("dim",`(${n.hint??"disabled"})`)}`:""}`;case"selected":return`${Dn($,(i)=>W("dim",i))}`;case"active":return`${W("green",xg)} ${$}${n.hint

70`:""}${i}

71`;switch(this.state){case"submit":{let I=n?`${W("gray",B)} `:"",U=er(r.output,v(this.options[this.cursor],"selected"),I);return`${u}${U}`}case"cancel":{let

72${W("gray",B)}`:""}`}default:{let I=n?`${W("cyan",B)} `:"",U=n?W("cyan",ar):"",b=u.split(`

73`).length,D=n?2:1;return`${u}${I}${lg({output:r.output,cursor:this.cursor,options:this.options,maxItems:r.maxItems,columnPadding:I.length,rowPadding:b+D,style:(z,N)=>

74${I}`)}

75${U}

76`}}}}).prompt()};var A3=`${W("gray",B)} `;var Jn=(r)=>new Cg({validate:r.validate,placeholder:r.placeholder,defaultValue:r.defaultValue,initialValue:r.initialValue,output:r.output,signal:r.signal,input:r.input,render(){let v=r?.withGuide??rr.withGuide,n=`${`${v?`${W("gray",B)}

77`:""}${Nn(this.state)} `}${r.message}

78`,g=r.placeholder?W("inverse",r.placeholder[0])+W("dim",r.placeholder.slice(1)):W(["inverse","hidden"],"_"),$=this.userInput?this.userInputWithCursor:g,i=this.value??"";switch(this.state){case"error":{

79${I}${$}

80${U}${u}

81`}case"submit":{let u=i?` ${W("dim",i)}`:"",I=v?W("gray",B):"";return`${n}${I}${u}`}case"cancel":{let u=i?` ${

82${I}`:""}`}default:{let u=v?`${W("cyan",B)} `:"",I=v?W("cyan",ar):"";return`${n}${u}${$}

83${I}

84`}}}}).prompt();import pv from"fs";import wW from"path";import{randomUUID as CW}from"crypto";var Fr={};lr(Fr,{xor:()=>ED,xid:()=>a0,void:()=>GD,uuidv7:()=>T0,uuidv6:()=>m0,uuidv4

85`)}var H$=(r)=>(v,n,g,$)=>{let i=g?{...g,async:!1}:{async:!1},u=v._zod.run({value:n,issues:[]},i);if(u instanceof Promise)throw new or;if(u.issues.length){let I=new($?.Err??r)(u.issues.map((U)=>Nr(U,i,p())));throw Wn(I,$?.callee),I}return u.value},Xn=H$(Kr),O$=(r)=>async(v,n,g,$)=>{let i=g?{...g,async:!0}:{async:!0},u=v._zod.run({value:n,issues:[]},i);if(u instanceof Promise)u=await u;if(u.issues.length){let I=new($?.Err??r)(u.issues.map((U)=>Nr(U,i,p())));throw Wn(I,$?.callee),I}return u.value},Pn=O$(Kr),E$=(r)=>(v,n,g)=>{let $=g?{...g,async:!1}:{async:!1},i=v._zod.run({value:n,issues:[]},$); ...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L83

86`).filter((i)=>i),g=Math.min(...n.map((i)=>i.length-i.trimStart().length)),$=n.map((i)=>i.slice(g)).map((i)=>" ".repeat(this.indent*2)

87`))}}var r4={major:4,minor:4,patch:3};var S=_("$ZodType",(r,v)=>{var n;r??(r={}),r._zod.def=v,r._zod.bag=r._zod.bag||{},r._zod.version=r4;let g=[...r._zod.def.checks??[]];if(r._zod.traits.has("$ZodCheck"))g.

88 if (${M}.issues.length) {

89 if (${O} in input) {

90 payload.issues = payload.issues.concat(${M}.issues.map(iss => ({

91 ...iss,

92 path: iss.path ? [${O}, ...iss.path] : [${O}]

93 })));

94 }

95 }

97 if (${M}.value === undefined) {

98 if (${O} in input) {

99 newResult[${O}] = undefined;

100 }

101 } else {

102 newResult[${O}] = ${M}.value;

103 }

Long lines were clipped for display.

Lines 144-194javascript

144 }

145

146 `)}j.write("payload.value = newResult;"),j.write("return payload;");let a=j.compile();return(x,M)=>a(N,x,M)},i,u=j$,I=!_$.jitless,b=I&&pg.value,D=v.catchall,z;r._zod.parse=(N,j)=>{z??(z=g.value);let k=N.value;if(!u(k))return N.issues.push({expected:"object",code:"invalid_type",input:k,inst:r}),N;if(I&&b&&j?.async===!1&&j.jitless!==!0){if(!i)i=$(v.shape);if(N=i(N,j),!D)return N;return O0([],k,N,j,z,r)}return n(N,j)}});function _0(r,v,n,g){for(let i of r)if(i.issues.length===0)return v.value=i.value,v;let $=r.filter((i)=>!v$(i));if($.length===1)return v.value=$[0].value,$[0];return v.issue ...

147

148Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let u of r.seen.entries()){let I=u[1

Source & flagged code

4 flagged · loading source

dist/index.jsView file

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L174

174`)} L175: ---`}var K_={id:"cursor",displayName:"Cursor",knownArtifacts:[".cursorrules",".cursor/rules"],generate:(r)=>[{path:".cursorrules",content:vr("Cursor Rules",r.sections)}],agent:{bin... L176: `),b=v.map((z)=>`- ${z}: one of [${s1(z,g).join(", ")}]`).join(` ... L179: `),"Review your stack"),await g()==="generate")return v;let i=qX(r,v),u=await $(i);if(!u)continue;let I=i.find((U)=>U.id===u);if(!I)continue;if(I.kind==="gate")v=oX(r,v,u);else{let... L180: `),`Recommended ${g.title} settings`)}let b=await vv({id:g.id,type:"select",message:`${g.title} — how to proceed?`,options:U,allowOther:!1},v.answers);v=wr(v,g.id,b),I=ib(b)}if(I==... L181: `)}];var aN={id:"tailwind",title:"Tailwind CSS",category:"styling",appliesTo:(r)=>r.stylingLibrary==="tailwind",questions:()=>[{id:"tailwind.config",type:"select",summary:"Config s...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L174

164`)});let a=[],x=kr(r,"formatter");if(x)a.push(`- Formatter: ${x}`);let M=kr(r,"linter");if(M)a.push(`- Linter: ${M}`);if(a.length)v.push({title:"Tooling",body:a.join(` L165: `)});let O=kr(r,"gitWorkflow");if(O){let V=[`Follow the ${O} workflow.`,"- Maintain a comprehensive .gitignore (build output, dependencies, environment/secret files, OS/editor arti... L166: `)})}v.push(...P_(r));let d=Object.keys(r).filter((V)=>V.includes(".")&&r[V]!==void 0&&r[V]!=="").map((V)=>`- ${nX(V)}: ${iX(r[V])}`);if(d.length)v.push({title:"Tech Details",body:... ... L174: `)} L175: ---`}var K_={id:"cursor",displayName:"Cursor",knownArtifacts:[".cursorrules",".cursor/rules"],generate:(r)=>[{path:".cursorrules",content:vr("Cursor Rules",r.sections)}],agent:{bin... L176: `),b=v.map((z)=>`- ${z}: one of [${s1(z,g).join(", ")}]`).join(` ... L179: `),"Review your stack"),await g()==="generate")return v;let i=qX(r,v),u=await $(i);if(!u)continue;let I=i.find((U)=>U.id===u);if(!I)continue;if(I.kind==="gate")v=oX(r,v,u);else{let... L180: `),`Recommended ${g.title} settings`)}let b=await vv({id:g.id,type:"select",message:`${g.title} — how to proceed?`,options:U,allowOther:!1},v.answers);v=wr(v,g.id,b),I=ib(

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L164

83${I} L84: `}}}}).prompt();import pv from"fs";import wW from"path";import{randomUUID as CW}from"crypto";var Fr={};lr(Fr,{xor:()=>ED,xid:()=>a0,void:()=>GD,uuidv7:()=>T0,uuidv6:()=>m0,uuidv4:(... L85: `)}var H$=(r)=>(v,n,g,$)=>{let i=g?{...g,async:!1}:{async:!1},u=v._zod.run({value:n,issues:[]},i);if(u instanceof Promise)throw new or;if(u.issues.length){let I=new($?.Err??r)(u.is...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L83

Findings

3 High2 Medium5 Low

HighChild Processdist/index.js

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/index.jsView file

Lines 63-103javascript

65`):n.write(`${xr} ${k}

67`)?r.split(`

68`).map((n)=>v(n)).join(`

70`:""}${i}

71`;switch(this.state){case"submit":{let I=n?`${W("gray",B)} `:"",U=er(r.output,v(this.options[this.cursor],"selected"),I);return`${u}${U}`}case"cancel":{let

72${W("gray",B)}`:""}`}default:{let I=n?`${W("cyan",B)} `:"",U=n?W("cyan",ar):"",b=u.split(`

73`).length,D=n?2:1;return`${u}${I}${lg({output:r.output,cursor:this.cursor,options:this.options,maxItems:r.maxItems,columnPadding:I.length,rowPadding:b+D,style:(z,N)=>

74${I}`)}

75${U}

77`:""}${Nn(this.state)} `}${r.message}

79${I}${$}

80${U}${u}

81`}case"submit":{let u=i?` ${W("dim",i)}`:"",I=v?W("gray",B):"";return`${n}${I}${u}`}case"cancel":{let u=i?` ${

82${I}`:""}`}default:{let u=v?`${W("cyan",B)} `:"",I=v?W("cyan",ar):"";return`${n}${u}${$}

83${I}

84`}}}}).prompt();import pv from"fs";import wW from"path";import{randomUUID as CW}from"crypto";var Fr={};lr(Fr,{xor:()=>ED,xid:()=>a0,void:()=>GD,uuidv7:()=>T0,uuidv6:()=>m0,uuidv4

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L83

86`).filter((i)=>i),g=Math.min(...n.map((i)=>i.length-i.trimStart().length)),$=n.map((i)=>i.slice(g)).map((i)=>" ".repeat(this.indent*2)

88 if (${M}.issues.length) {

89 if (${O} in input) {

90 payload.issues = payload.issues.concat(${M}.issues.map(iss => ({

91 ...iss,

92 path: iss.path ? [${O}, ...iss.path] : [${O}]

93 })));

94 }

95 }

97 if (${M}.value === undefined) {

98 if (${O} in input) {

99 newResult[${O}] = undefined;

100 }

101 } else {

102 newResult[${O}] = ${M}.value;

103 }

Long lines were clipped for display.

Lines 144-194javascript

144 }

145

147

148Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let u of r.seen.entries()){let I=u[1