dsh-ask-cases@0.1.0
A star left of the composer: click it to rewrite a vague question into an answerable one, using the current conversation as context.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe rewrite flow matches the package's purpose and runs from an explicit UI action, but it also silently logs session identifiers to a machine-specific path. That undisclosed local data collection warrants a warning; the source does not establish malicious exfiltration.
Decision evidence
public snapshot- The host appends log entries to a hard-coded path under a specific user's Documents directory.
- On a rewrite request, the plugin logs live session IDs and whether the requested session was found.
- The browser triggers rewriting from its UI and sends the draft and session ID to the plugin route.
- The manifest declares no lifecycle scripts.
- The model request uses the package's stated DeepSeek account provider, and no unrelated external collector was found.
- The flagged bundle contains a BOM but no bidi control characters; the browser's auto-send setting defaults to false.
Source & flagged code
7 flaggedSource contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
lib/client.jsView on unpkg · L240A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
lib/client.jsView on unpkgThe browser triggers rewriting from its UI and sends the draft and session ID to the plugin route.
lib/client.jsView on unpkg · L348Findings
Affected versions and remediation
This report applies to dsh-ask-cases@0.1.0.
See all versions of dsh-ask-cases for other recorded verdicts.
- Review the evidence and your use of dsh-ask-cases@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.