registry / expert-ai / 0.6.1

expert-ai@0.6.1

Expert AI - Intelligent Research Agent with PI Framework

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 135 file(s), 1.51 MB of source, external domains: api.github.com, claude.ai, cli.github.com, expert-ai-gateway.arthouse.workers.dev, git-scm.com, github.com, mariozechner.at, mistral.ai, pi.dev, registry.npmjs.org, ssv.asia

Source & flagged code

6 flagged

bin/x.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { fileURLToPath } from "node:url";

3import { dirname, resolve } from "node:path";

4import { createInterface } from "node:readline";

5import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync } from "node:fs";

6import { homedir } from "node:os";

7import { spawn } from "node:child_process";

High

Child Process

Package source references child process execution.

bin/x.jsView on unpkg · L6

9const __filename = fileURLToPath(import.meta.url);

10const __dirname = dirname(__filename);

12// Quick Thoughts = the inlined daily-note adder (Obsidian). Ships in bin/qt.cjs.

13function runQuickThoughts(extraArgs = []) {

14 const qtPath = resolve(__dirname, "qt.cjs");

15 const child = spawn(process.execPath, [qtPath, ...extraArgs], { stdio: "inherit" });

16 child.on("exit", (code) => process.exit(code ?? 0));

17}

19const WORKER_URL = "https://expert-ai-gateway.arthouse.workers.dev";

20const HOME_DIR = resolve(homedir(), ".expert-ai-terminal");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/x.jsView on unpkg · L6

21const CONFIG_HOME = resolve(HOME_DIR, "agent");

22const CONFIG_SRC = resolve(__dirname, "..", ".expert-ai-terminal", "agent");

23const SESSION_FILE = resolve(HOME_DIR, "session.json");

25const c = {

26 reset: "\x1b[0m", bold: "\x1b[1m", cyan: "\x1b[36m",

Lines 56-96javascript

56}

58async function prompt(question) {

59 const rl = createInterface({ input: process.stdin, output: process.stdout });

60 return new Promise((res) => rl.question(question, (a) => { rl.close(); res

Lines 189-229javascript

189 console.log(`\n${c.cyan}${c.bold}Buy a pass or plan${c.reset} ${c.dim}(UPI / GPay / PhonePe)${c.reset}\n`);

190 console.log(`${c.bold}6-hour passes${c.reset} ${c.dim

bin/qt.cjsView file

Lines 12-52javascript

12 bold: ['1', '22'], dim: ['2', '22'],

13 red: ['31', '39'], green: ['32', '39'], yellow: ['33', '39'],

14 cyan: ['36', '39'

bin/xpi.jsView file

Lines 25-65javascript

25const RAW = process.argv.includes("--raw");

26const passthrough = process.argv.slice(2).filter((a) => a !== "--raw");

28const VENDORED_PI =

Source & flagged code

6 flagged · loading source

bin/x.jsView file

6import { homedir } from "node:os"; L7: import { spawn } from "node:child_process"; L8:

High

Child Process

Package source references child process execution.

bin/x.jsView on unpkg · L6

76if (process.platform === "win32") { L77: // `start` is a cmd builtin, not an exe — must go through cmd.exe. The "" is the window title. L78: spawn("cmd", ["/c", "start", "", url], { stdio: "ignore", detached: true }).unref();

High

Shell

Package source references shell execution.

bin/x.jsView on unpkg · L76

6import { homedir } from "node:os"; L7: import { spawn } from "node:child_process"; L8: L9: const __filename = fileURLToPath(import.meta.url); L10: const __dirname = dirname(__filename); L11: ... L18: L19: const WORKER_URL = "https://expert-ai-gateway.arthouse.workers.dev"; L20: const HOME_DIR = resolve(homedir(), ".expert-ai-terminal"); ... L46: try { L47: const s = JSON.parse(readFileSync(SESSION_FILE, "utf-8")); L48: if (s.token && s.sessionExpires && s.sessionExpires > Math.floor(Date.now() / 1000)) return s;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/x.jsView on unpkg · L6

209package = expert-ai; repositoryIdentity = expert-ai-terminal; dependency = qrcode-terminal L209: L210: let qr; try { qr = (await import("qrcode-terminal")).default; } catch {} L211: console.log(`\n${c.bold}${tierLabel}${kind === "monthly" ? " (Monthly)" : ""} — ₹${rupees}${c.reset}\n`);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/x.jsView on unpkg · L209

bin/qt.cjsView file

32const chalk = _styler([]); L33: const inquirer = require('inquirer'); L34: const fse = require('fs-extra');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/qt.cjsView on unpkg · L32

bin/xpi.jsView file

45const r = process.platform === "win32" L46: ? spawnSync(`npm install ${pkg} --prefix "${RAW_PI_PREFIX}" --no-audit --no-fund --loglevel error`, { stdio: "inherit", shell: true }) L47: : spawnSync("npm", ["install", pkg, "--prefix", RAW_PI_PREFIX, "--no-audit", "--no-fund", "--loglevel", "error"], { stdio: "inherit" });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/xpi.jsView on unpkg · L45

Findings

5 High4 Medium4 Low

HighChild Processbin/x.js

HighShellbin/x.js

HighSandbox Evasion Gated Capabilitybin/x.js

HighCopied Package Dependency Bridgebin/x.js

HighRuntime Package Installbin/xpi.js

MediumDynamic Requirebin/qt.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

bin/x.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { fileURLToPath } from "node:url";

3import { dirname, resolve } from "node:path";

4import { createInterface } from "node:readline";

5import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync } from "node:fs";

6import { homedir } from "node:os";

7import { spawn } from "node:child_process";

High

Child Process

Package source references child process execution.

bin/x.jsView on unpkg · L6

9const __filename = fileURLToPath(import.meta.url);

10const __dirname = dirname(__filename);

12// Quick Thoughts = the inlined daily-note adder (Obsidian). Ships in bin/qt.cjs.

13function runQuickThoughts(extraArgs = []) {

14 const qtPath = resolve(__dirname, "qt.cjs");

15 const child = spawn(process.execPath, [qtPath, ...extraArgs], { stdio: "inherit" });

16 child.on("exit", (code) => process.exit(code ?? 0));

17}

19const WORKER_URL = "https://expert-ai-gateway.arthouse.workers.dev";

20const HOME_DIR = resolve(homedir(), ".expert-ai-terminal");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/x.jsView on unpkg · L6

21const CONFIG_HOME = resolve(HOME_DIR, "agent");

22const CONFIG_SRC = resolve(__dirname, "..", ".expert-ai-terminal", "agent");

23const SESSION_FILE = resolve(HOME_DIR, "session.json");

25const c = {

26 reset: "\x1b[0m", bold: "\x1b[1m", cyan: "\x1b[36m",

Lines 56-96javascript

56}

58async function prompt(question) {

59 const rl = createInterface({ input: process.stdin, output: process.stdout });

60 return new Promise((res) => rl.question(question, (a) => { rl.close(); res

Lines 189-229javascript

189 console.log(`\n${c.cyan}${c.bold}Buy a pass or plan${c.reset} ${c.dim}(UPI / GPay / PhonePe)${c.reset}\n`);

190 console.log(`${c.bold}6-hour passes${c.reset} ${c.dim

bin/qt.cjsView file

Lines 12-52javascript

12 bold: ['1', '22'], dim: ['2', '22'],

13 red: ['31', '39'], green: ['32', '39'], yellow: ['33', '39'],

14 cyan: ['36', '39'

bin/xpi.jsView file

Lines 25-65javascript

25const RAW = process.argv.includes("--raw");

26const passthrough = process.argv.slice(2).filter((a) => a !== "--raw");

28const VENDORED_PI =