registry / auto-debug-tool / 0.0.1-security

auto-debug-tool@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface in this published package version. The package has no install hooks or executable/runtime entrypoints.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package code is present to execute, persist, access data, or exfiltrate it.

Mechanism

metadata-only security holding package

Rationale

Direct inspection found a metadata-only holding package with a non-executable README. No concrete malicious behavior exists in `auto-debug-tool@0.0.1-security`.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

`package.json` contains metadata only; no lifecycle scripts, entrypoints, dependencies, or executable fields.
`README.md` is a security-placeholder notice and contains no executable content.
Package file listing contains only `package.json` and `README.md`; no code, binaries, or payload files.

auto-debug-tool@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code