registry / @xylex-group/athena / 2.12.0

@xylex-group/athena@2.12.0

Athena JS SDK

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an SDK and explicit schema-generator CLI; its filesystem and network actions require consumer calls or CLI invocation.

Static reason

No blocking static signals were detected.

Trigger

Consumer invokes SDK methods or runs `athena-js`.

Impact

Can access configured services and generate files in the invoking project, consistent with documented SDK/CLI behavior.

Mechanism

Configured Athena API/database access and user-invoked schema generation.

Rationale

Static inspection shows package-aligned SDK networking and an explicit code-generation CLI, not install-time or covert execution. The dynamic import and environment handling are confined to loading user-selected generator configuration.

Evidence

package.jsonbin/athena-js.jsdist/cli/index.jsdist/index.js

Network endpoints3

athena-db.commirror3.athena-db.comlocalhost:3001/api/auth

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

@xylex-group/athena@2.12.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code