registry / aiblogwrite / 0.2.0
aiblogwrite@0.2.0
Add an AI-written, SEO-ready blog to your Next.js site with one command: /blog pages on your own domain, a sitemap, and a /blog-admin page to write and schedule posts.
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection found no install hook or unauthorized data transfer. The network activity is tied to blog delivery, site-configured database storage, domain checking during explicit setup, or a reader's click.
Static reason
No blocking static signals were detected.
Trigger
The CLI runs when a user invokes init; runtime requests occur when the site's blog functions are called, and click tracking occurs after a reader clicks a call-to-action button.
Impact
No confirmed unauthorized access, credential disclosure, destructive change, or persistence was found.
Mechanism
The CLI displays its plan and asks before making changes. Runtime code fetches public blog data from the configured service, accepts signed updates for the matching site, and stores them in the configured database.
AI rationale
Source inspection found no install hook or unauthorized data transfer. The network activity is tied to blog delivery, site-configured database storage, domain checking during explicit setup, or a reader's click.
Network endpoints1
admin.aiblogwrite.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook and exposes a CLI plus runtime modules.
- The CLI previews planned changes and asks before it writes project files or installs the package.
- Runtime requests read published blog content from the configured AIBlogWrite server; optional database storage uses the site's configured database and accepts signed, site-matched updates.
- The bundled database dependencies are ordinary MongoDB, MySQL, and PostgreSQL drivers used for database operations.
- Click tracking sends a request only after a reader clicks a post call-to-action button.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
4 flaggedpackage.jsonView file
1{
"name": "aiblogwrite",
"version": "0.2.0",
"description": "Add an AI-written, SEO-ready blog to your Next.js site with one command: /blog pages on your own domain, a sitemap, and a /blog-admin page to write an
Low
Suspicious Lifecycle Evidence
The manifest has no install lifecycle hook and exposes a CLI plus runtime modules.
package.jsonView on unpkg · L1bin/aiblogwrite.mjsView file
201if (args.dryRun) {
console.log(dim("Dry run: nothing was changed."));
return 0;
}
const go = (await prompt.ask("Go ahead? (Y/n) ", "y")).toLowerCase();
if (go.startsWith("n")) {
console.log("Nothing was changed.");
Low
Ai Review Evidence
The CLI previews planned changes and asks before it writes project files or installs the package.
bin/aiblogwrite.mjsView on unpkg · L201.lpm-dependency-evidence-b88bbd71-ab7a-44ce-b994-180faa5b02b0/0/npm-linux/lib/transactions.js
Findings
2 Medium10 Low
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/aiblogwrite.mjs
LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-b88bbd71-ab7a-44ce-b994-180faa5b02b0/0/npm-linux/lib/transactions.js
LowSuspicious Lifecycle Evidence.lpm-dependency-evidence-b88bbd71-ab7a-44ce-b994-180faa5b02b0/0/npm-linux/lib/deps.js
Affected versions and remediation
This report applies to aiblogwrite@0.2.0.
See all versions of aiblogwrite for other recorded verdicts.
- Review the evidence and your use of aiblogwrite@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.