registry / fullcourtdefense-cli / 1.7.22

fullcourtdefense-cli@1.7.22

Full Court Defense CLI — security scanning for AI agents from your terminal

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 32 file(s), 490 KB of source, external domains: 127.0.0.1, agent-guard.vercel.app, agent.local, api.fullcourtdefense.ai, fullcourtdefense.ai, internal.company.com, json.schemastore.org, mcp.internal, my-agent.com, my-bot.com, rag.internal, www.apple.com, your-ai-endpoint.com

Source & flagged code

1 flagged

dist/commands/autoProtect.jsView file

Lines 19-59javascript

19 var ownKeys = function(o) {

20 ownKeys = Object.getOwnPropertyNames || function (o) {

21 var ar = [];

22 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

23 return ar;

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.autoProtectCommand = autoProtectCommand;

37const fs = __importStar(require("fs"));

38const os = __importStar(require("os"));

39const path = __importStar(require("path"));

40const child_process_1 = require("child_process");

41const mcpGateway_1 = require("./mcpGateway");

42const COLOR = {

43 reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',

44 red: '\x1b[31m', yellow: '\x1b[33m', green: '\x1b[32m', cyan: '\x1b[36m', gray: '\x1b[90m',

45};

46const TASK_NAME = 'FullCourtDefense Auto-Protect';

47const CRON_MARKER = '# FCD_AUTO_PROTECT';

48function cliEntry() {

49 return path.resolve(process.argv[1] || path.join(__dirname, '..', 'index.js'));

50}

51function launcherDir() {

52 const base = process.platform === 'win32'

53 ? (process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'))

54 : path.join(os.homedir(), '.fullcourtdefense');

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/autoProtect.jsView on unpkg · L39

55 return path.join(base, 'FullCourtDefense');

56}

57/** On Windows, write a hidden VBS launcher so the scheduled run doesn't flash a console window. */

58function ensureWindowsLauncher() {

59 const dir = launcherDir();

Source & flagged code

1 flagged · loading source

dist/commands/autoProtect.jsView file

39const path = __importStar(require("path")); L40: const child_process_1 = require("child_process"); L41: const mcpGateway_1 = require("./mcpGateway"); ... L48: function cliEntry() { L49: return path.resolve(process.argv[1] || path.join(__dirname, '..', 'index.js')); L50: } L51: function launcherDir() { L52: const base = process.platform === 'win32' L53: ? (process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local')) L54: : path.join(os.homedir(), '.fullcourtdefense'); ... L76: : ['/SC', 'MINUTE', '/MO', String(intervalMinutes)]; L77: const result = (0, child_process_1.spawnSync)('schtasks', [...baseArgs, ...schedArgs], { stdio: 'inherit' });

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/autoProtect.jsView on unpkg · L39

Findings

3 Medium5 Low

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/commands/autoProtect.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/commands/autoProtect.jsView file

Lines 19-59javascript

19 var ownKeys = function(o) {

20 ownKeys = Object.getOwnPropertyNames || function (o) {

21 var ar = [];

22 for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;

23 return ar;

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.autoProtectCommand = autoProtectCommand;

37const fs = __importStar(require("fs"));

38const os = __importStar(require("os"));

39const path = __importStar(require("path"));

40const child_process_1 = require("child_process");

41const mcpGateway_1 = require("./mcpGateway");

42const COLOR = {

43 reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',

44 red: '\x1b[31m', yellow: '\x1b[33m', green: '\x1b[32m', cyan: '\x1b[36m', gray: '\x1b[90m',

45};

46const TASK_NAME = 'FullCourtDefense Auto-Protect';

47const CRON_MARKER = '# FCD_AUTO_PROTECT';

48function cliEntry() {

49 return path.resolve(process.argv[1] || path.join(__dirname, '..', 'index.js'));

50}

51function launcherDir() {

52 const base = process.platform === 'win32'

53 ? (process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'))

54 : path.join(os.homedir(), '.fullcourtdefense');

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/commands/autoProtect.jsView on unpkg · L39

55 return path.join(base, 'FullCourtDefense');

56}

57/** On Windows, write a hidden VBS launcher so the scheduled run doesn't flash a console window. */

58function ensureWindowsLauncher() {

59 const dir = launcherDir();