registry  /  aicodingcli  /  1.0.0

aicodingcli@1.0.0

Unified Node.js CLI for Codex skills

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 36 file(s), 237 KB of source, external domains: jzdevops.szkingdom.com, svn.szkingdom.com

Source & flagged code

4 flagged · loading source
vendor/kcbp-adapter/dll/client.pemView file
1patternName = private_key_rsa severity = critical line = 1 matchedText = -----BEG...----
Critical
Critical Secret

Package contains a critical-looking secret pattern.

vendor/kcbp-adapter/dll/client.pemView on unpkg · L1
1patternName = private_key_rsa severity = critical line = 1 matchedText = -----BEG...----
Critical
Secret Pattern

RSA private key in vendor/kcbp-adapter/dll/client.pem

vendor/kcbp-adapter/dll/client.pemView on unpkg · L1
bin/aicli.jsView file
3L4: const path = require("path"); L5:
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/aicli.jsView on unpkg · L3
vendor/kcbp-adapter/dll/libzlib1.dllView file
•path = vendor/kcbp-adapter/dll/libzlib1.dll kind = native_binary sizeBytes = 95744 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

vendor/kcbp-adapter/dll/libzlib1.dllView on unpkg

Findings

2 Critical5 Medium5 Low
CriticalCritical Secretvendor/kcbp-adapter/dll/client.pem
CriticalSecret Patternvendor/kcbp-adapter/dll/client.pem
MediumDynamic Requirebin/aicli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryvendor/kcbp-adapter/dll/libzlib1.dll
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License