aislop@0.16.0
Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 10 language targets (TypeScript, JavaScript, Expo / React Native, Python, Go, Rust, Ruby, PHP, C#,
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a code-quality CLI with explicit hook-install and tool-download features, not an automatic install-time payload. The static credential-redirection and eval hints are not supported by the inspected source.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI commands such as hook install or aislop-tools.
Impact
No unconsented persistence, credential theft, or remote code execution was found.
Mechanism
User-invoked hook setup and hash-checked tool download.
AI rationale
This is a code-quality CLI with explicit hook-install and tool-download features, not an automatic install-time payload. The static credential-redirection and eval hints are not supported by the inspected source.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI can install coding-agent hooks, but only through an explicit install command.
- The optional tool installer downloads fixed releases and verifies their hashes before copying binaries.
- The package checks npm for updates only after a user runs its CLI.
- The reported eval signal is a scanner-rule label, not an eval call.
Evidence against
- package.json has no preinstall, install, postinstall, or other lifecycle hook.
- No credential collection, credential redirection, or secret exfiltration was found.
- No remote model endpoint or remote command bridge was found.
- Framework spawning is opt-in through an enabled option.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/core-D4295PVP.jsView file
1import { spawn } from "node:child_process";
L2: import process from "node:process";
High
Child Process
Package source references child process execution.
dist/core-D4295PVP.jsView on unpkg · L1dist/index.jsView file
13666};
L13667: const isSafeShellSpawnArray = (content, matchIndex) => /^spawn\s*\(\s*\[/.test(content.slice(matchIndex)) && !/^\s*spawn\s*\(\s*\[\s*["'](?:sh|bash|zsh|cmd|cmd\.exe|powershell|pwsh...
L13668: const PLACEHOLDER_EXPR_RE = /^(?:placeholders?|placeholderList|bindMarkers?|bindingMarkers?|bindPlaceholders?|bindingPlaceholders?|parameterPlaceholders?|sqlPlaceholders?)(?:\.\w+\...
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import * as readline from "node:readline";
let baseUrlOption;
if (Object.hasOwn(compilerOptions, "baseUrl")) baseUrlOption = {
value: compilerOptions.baseUrl
const baseDir = baseUrlOption && typeof baseUrlOption.value === "string" ? safeProjectDirectoryPath(path.resolve(path.dirname(baseUrlOption.configPath), baseUrlOption.value), rootD...
"readline",
const URL_CONFIG_CONTEXT_RE = /\b(?:api|base[_-]?url|baseUrl|endpoint|host|origin|webhook|callback|redirect|server|service|domain|url)\b/i;
if (changed) fs.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, " ")}\n`);
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/core-D4295PVP.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighRemote Agent Bridgedist/cli.js
HighCross File Remote Execution Contextdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to aislop@0.16.0.
See all versions of aislop for other recorded verdicts.
- Review the evidence and your use of aislop@0.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.