registry / agilebuilder-ui / 1.1.94-sit3

agilebuilder-ui@1.1.94-sit3

This template should help get you started developing with Vue 3 in Vite. The template uses Vue 3 `<script setup>` SFCs, check out the [script setup docs](https://v3.vuejs.org/api/sfc-script-setup.html#sfc-script-setup) to learn more.

AI Security Review

scanned 13h ago · by lpm-firewall-ai

No install-time or package-host compromise behavior is established. At runtime, configurable/server-supplied rule fields can be concatenated into JavaScript passed to eval.

Static reason

No blocking static signals were detected.

Trigger

A SuperGrid scan or dynamic condition evaluation using attacker-controlled or compromised configuration.

Impact

Potential browser-context code execution if an attacker can control the configuration inputs.

Mechanism

Dynamic expression construction followed by eval.

Rationale

The package is not malicious by source intent, but repeated unsandboxed eval of configurable expressions presents an unresolved browser code-execution risk. No lifecycle, exfiltration, persistence, or foreign control-surface mutation was found.

Evidence

package.jsonpackages/super-grid/src/scan-util.tspackages/super-grid/src/utils.jssrc/utils/util.jspackages/chat-embed/src/voice/voice.vuepackages/chat-embed/src/voice/js/crypto-js.jslib/super-ui.jssrc/utils/request.js

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Critical Vulnerability with medium false-positive risk.

agilebuilder-ui@1.1.94-sit3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code