registry / @zaip-ai/cli / 5.6.0
@zaip-ai/cli@5.6.0
⚠ Under reviewCLI oficial para instalar e configurar o ZAIP-AIOS em qualquer repositório
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest has no npm install lifecycle hook, and inspected source did not establish an attack. The flagged design executable remains unresolved, so the required source coverage for a clean decision is incomplete.
Static reason
One or more suspicious static signals were detected.
Trigger
Unknown; static source inspection did not establish whether the executable is invoked.
Impact
No concrete impact was confirmed; the executable's behavior cannot be determined from the inspected source.
Mechanism
The package includes a design executable that could not be assessed through source citations, and the inspected doctor code only lists dashboard files for validation.
AI rationale
The manifest has no npm install lifecycle hook, and inspected source did not establish an attack. The flagged design executable remains unresolved, so the required source coverage for a clean decision is incomplete.
Evidence
templates/.agents/design/zaip-design.exedist/services/doctor.js
Decision evidence
public snapshotAI called this Manual Review at 71.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json has no install lifecycle hooks; its scripts are build, maintenance, and prepack tasks.
- doctor.js lists dashboard files for validation and checks for missing or drifted adapters; inspection found no reference to the flagged design executable there.
- The Codex hook activation list and fixture helper concern writing hook files under an explicit project root, but do not establish an npm install-time mutation.
- The flagged design executable is a required finding path whose bytes cannot be cited as UTF-8 source, so its behavior remains unresolved.
Evidence against
- The inspected Git download code checks the final host against an allowlist.
- No inspected source established credential theft, an unrelated network recipient, or install-time execution of the flagged design executable.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
8 flaggeddist/services/stack-git.jsView file
1import { execFile } from "node:child_process";
L2: import { createHash } from "node:crypto";
...
L5: import { promisify } from "node:util";
L6: import { inflateRawSync } from "node:zlib";
L7: import { assertSafeDestination } from "./transactional-files.js";
L8: const exec = promisify(execFile);
L9: const API = "https://api.github.com/repos/git-for-windows/git/releases/latest";
L10: const KNOWN_DIGESTS = {
...
L12: };
L13: export function resolveGitForWindowsRelease(value, arch = process.arch) {
L14: const release = value;
...
L34: try {
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/services/stack-git.jsView on unpkg · L1templates/.agents/design/zaip-design.exeView file
•path = templates/.agents/design/zaip-design.exe
kind = payload_in_excluded_dir
sizeBytes = 7680
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.agents/design/zaip-design.exeView on unpkgFindings
1 Critical3 High7 Medium5 Low
CriticalTrigger Reachable Excluded Directory Payloaddist/services/doctor.js
HighSandbox Evasion Gated Capabilitydist/services/stack-git.js
HighPayload In Excluded Dirtemplates/.agents/design/zaip-design.exe
HighSemantic Analysis Limiteddist/services/codex-pre-tool-hook-template.test.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarytemplates/.agents/design/zaip-design.exe
MediumShips Build Helpertemplates/.agents/design/packages/windows-launcher/build-design-launcher.ps1
MediumOversized Source Filetemplates/.agents/runtime/bin/zaip.mjs
MediumOversized Cli Entrypointtemplates/.agents/runtime/bin/zaip.mjs
Affected versions and remediation
This report applies to @zaip-ai/cli@5.6.0.
See all versions of @zaip-ai/cli for other recorded verdicts.
- Review the evidence and your use of @zaip-ai/cli@5.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.