registry / iflow-engine-base / 4.1.0
iflow-engine-base@4.1.0
⚠ Under reviewBIM Engine SDK for Vue2, Vue3, React and HTML
AI Security Review
scanned 10d ago · by lpm-firewall-aiInspected source shows an explicitly exposed AI encoding feature that transfers model properties to its configured service when invoked, but does not establish malicious behavior. A clean decision cannot be supported within the required citation limit for the full required path set, so this remains for review.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer calls the OneClickEncoding start method.
Impact
Model property data is disclosed to that service as part of encoding; the inspected source does not establish a separate attack.
Mechanism
The encoding flow batches model properties and posts them with a bearer key to the DeepSeek chat completion endpoint.
AI rationale
Inspected source shows an explicitly exposed AI encoding feature that transfers model properties to its configured service when invoked, but does not establish malicious behavior. A clean decision cannot be supported within the required citation limit for the full required path set, so this remains for review.
Evidence
dist/chunks/EngineKernel-C3q8V9ui.jsdist/index.d.tspackage.json
Network endpoints1
api.deepseek.com/v1/chat/completions
Decision evidence
public snapshotAI called this Manual Review at 69.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The published entrypoints expose the bundled SDK and its declarations.
- The SDK includes a OneClickEncoding API with an optional caller-supplied key and a bundled default key.
- Calling its encoding flow sends model property data to the DeepSeek chat endpoint.
Evidence against
- The encoding flow is initiated through the exposed start method; inspected source does not show install-time transmission.
- The endpoint matches the stated AI encoding function, and no concrete attack behavior was established.
Behavioral surface
CryptoEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
7 flaggeddistGaussian/gaussian.umd.jsView file
1(function(rt,St){typeof exports=="object"&&typeof module<"u"?St(exports,require("three"),require("@mkkellogg/gaussian-splats-3d")):typeof define=="function"&&define.amd?define(["ex...
L2: \0`,ie+=g(Q,2),ie+=C.magic,ie+=g(m,2),ie+=g(_,2),ie+=g(oe.crc32,4),ie+=g(oe.compressedSize,4),ie+=g(oe.uncompressedSize,4),ie+=g(i.length,2),ie+=g(H.length,2),{fileRecord:T.LOCAL_F...
L3: `)}return u},a.decode=function(d,x){if(typeof d!="string")throw new TypeError('"input" must be a string.');if(typeof x!="string")throw new TypeError('"alphabet" must be a string.')...
Low
Eval
Package source references a known benign dynamic code generation pattern.
distGaussian/gaussian.umd.jsView on unpkg · L1dist/chunks/EngineKernel-C3q8V9ui.jsView file
7255contains invisible/control Unicode U+200C (zero width non-joiner)
extended<U+200C> = /* @__PURE__ */ new Map();
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/chunks/EngineKernel-C3q8V9ui.jsView on unpkg · L7255Findings
2 Critical2 High4 Medium6 Low
CriticalTrojan Source Unicodedist/chunks/EngineKernel-C3q8V9ui.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.d.ts
HighShips High Entropy Blobdist/assets/hdr/17.hdr
HighSemantic Analysis Limiteddist/bim-engine-sdk.umd.js
MediumNetwork
MediumShips Wasm Moduledist/draco/draco_decoder.wasm
MediumOversized Source Filedist/bim-engine-sdk.umd.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldistGaussian/gaussian.umd.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to iflow-engine-base@4.1.0.
See all versions of iflow-engine-base for other recorded verdicts.
- Review the evidence and your use of iflow-engine-base@4.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.