registry / aiblueprint-cli / 1.4.96
aiblueprint-cli@1.4.96
AIBlueprint CLI for setting up AI coding configurations
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
10 flaggeddist/cli.jsView file
614var EventEmitter = __require("node:events").EventEmitter;
L615: var childProcess = __require("node:child_process");
L616: var path = __require("node:path");
High
1056}
L1057: const execArgv = process2.execArgv ?? [];
L1058: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
High
32897try {
L32898: execSync(command, {
L32899: stdio: "pipe",
...
L32901: cwd: options?.cwd,
L32902: env: { ...process.env, CI: "true" }
L32903: });
...
L32910: if (!isWindows) {
L32911: if (silentExec("curl -fsSL https://bun.sh/install | bash", { timeout: 120000 })) {
L32912: return true;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L32897Findings
5 High8 Medium6 Low
HighChild Processdist/cli.js
HighShelldist/cli.js
HighSame File Env Network Executiondist/cli.js
HighSandbox Evasion Gated Capabilityagents-config/claude-config/scripts/statusline/src/lib/features/limits/index.ts
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli.js
MediumShips Build Helperagents-config/skills/apex/scripts/setup-templates.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
MediumSecret Patternagents-config/skills/apex/steps/step-07-tests.md
MediumSecret Patternagents-config/skills/apex/steps/step-07-tests.md
Affected versions and remediation
This report applies to aiblueprint-cli@1.4.96.
See all versions of aiblueprint-cli for other recorded verdicts.
- Review the evidence and your use of aiblueprint-cli@1.4.96 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.