registry / @zaip-ai/cli / 5.2.0
@zaip-ai/cli@5.2.0
⚠ Under reviewCLI oficial para instalar e configurar o ZAIP-AIOS em qualquer repositório
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe inspected manifest has no install lifecycle hook, and the doctor code treats design files as required files rather than executing them. The bundled design executable and large runtime bundle leave material behavior unresolved, so the source does not support a clean verdict.
Static reason
One or more suspicious static signals were detected.
Trigger
Unknown; the artifact’s activation could not be established from inspected source.
Impact
Unknown; available source does not establish whether the artifact is executed or what effects it may have.
Mechanism
The package contains an executable file in its design template, but its behavior could not be inspected as text.
AI rationale
The inspected manifest has no install lifecycle hook, and the doctor code treats design files as required files rather than executing them. The bundled design executable and large runtime bundle leave material behavior unresolved, so the source does not support a clean verdict.
Evidence
templates/.agents/design/zaip-design.exetemplates/.agents/runtime/bin/zaip.mjs
Network endpoints1
api.github.com/repos/git-for-windows/git/releases/latest
Decision evidence
public snapshotAI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json defines build and prepack scripts but no npm lifecycle hook; the CLI starts through the `zaip` executable.
- The doctor service reads and checks project files, and lists design documents and web pages as required files.
- On Windows, the Git installer checks the downloaded archive against a SHA-256 digest before extracting it.
- The package includes an unsupported executable artifact at `templates/.agents/design/zaip-design.exe`; its behavior remains unresolved.
Evidence against
- The inspected source does not establish that the doctor service executes the design artifact.
- The inspected Windows Git installer uses GitHub’s release API and validates the archive digest before extraction.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/services/stack-git.jsView file
1import { execFile } from "node:child_process";
L2: import { createHash } from "node:crypto";
...
L5: import { promisify } from "node:util";
L6: import { inflateRawSync } from "node:zlib";
L7: import { assertSafeDestination } from "./transactional-files.js";
L8: const exec = promisify(execFile);
L9: const API = "https://api.github.com/repos/git-for-windows/git/releases/latest";
L10: const KNOWN_DIGESTS = {
...
L12: };
L13: export function resolveGitForWindowsRelease(value, arch = process.arch) {
L14: const release = value;
...
L34: try {
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/services/stack-git.jsView on unpkg · L1templates/.agents/design/zaip-design.exeView file
•path = templates/.agents/design/zaip-design.exe
kind = payload_in_excluded_dir
sizeBytes = 7680
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.agents/design/zaip-design.exeView on unpkgFindings
1 Critical3 High7 Medium5 Low
CriticalTrigger Reachable Excluded Directory Payloaddist/services/doctor.js
HighSandbox Evasion Gated Capabilitydist/services/stack-git.js
HighPayload In Excluded Dirtemplates/.agents/design/zaip-design.exe
HighSemantic Analysis Limiteddist/services/codex-pre-tool-hook-template.test.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarytemplates/.agents/design/zaip-design.exe
MediumShips Build Helpertemplates/.agents/design/packages/windows-launcher/build-design-launcher.ps1
MediumOversized Source Filetemplates/.agents/runtime/bin/zaip.mjs
MediumOversized Cli Entrypointtemplates/.agents/runtime/bin/zaip.mjs
Affected versions and remediation
This report applies to @zaip-ai/cli@5.2.0.
See all versions of @zaip-ai/cli for other recorded verdicts.
- Review the evidence and your use of @zaip-ai/cli@5.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.