registry / @xylex-group/athena / 2.12.1

@xylex-group/athena@2.12.1

Athena JS SDK

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime networking is SDK functionality targeting configured Athena/database services; the CLI performs user-invoked schema generation.

Static reason

No blocking static signals were detected.

Trigger

Import SDK methods or explicitly run athena-js generate.

Impact

No install-time execution, stealth persistence, credential harvesting, or unconsented file mutation established.

Mechanism

HTTP/WebSocket database SDK and user-invoked code generation.

Rationale

Direct inspection shows a database/API SDK with an explicit CLI generator, not a malicious package. The dynamic import and filesystem writes are confined to user-invoked configuration loading and generated artifacts.

Evidence

package.jsonbin/athena-js.jsdist/index.jsdist/cli/index.jsREADME.md

Network endpoints2

athena-db.comlocalhost:3001/api/auth

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

@xylex-group/athena@2.12.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code