Static Scan Results
scanned 2h ago · by rust-scannerStatic analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
9 flagged · loading sourcedist/chunk-GH37CLOE.jsView file
1// src/tools/builtin/run-tests.ts
L2: import { execSync, spawnSync } from "child_process";
L3: import { existsSync, readFileSync, readdirSync } from "fs";
High
Child Process
Package source references child process execution.
dist/chunk-GH37CLOE.jsView on unpkg · L1dist/electron-server.jsView file
729if (/\bSet-Content\b|\bOut-File\b|\bAdd-Content\b|\bCopy-Item\b|\bMove-Item\b|\bSet-ItemProperty\b|\bNew-ItemProperty\b/i.test(cmd)) return "write";
L730: if (/\b(python3?|node|deno|bun|perl|ruby|php|bash|sh|zsh|pwsh|powershell)(\.exe)?\b[^\n]*?\s-(?:Command|EncodedCommand|c|e|p|r)\b/i.test(cmd)) return "write";
L731: if (/\bcmd(\.exe)?\s+\/[ck]\b/i.test(cmd)) return "write";
High
89// 可选：直接在此写 key（也可通过 apiKeys 字段或环境变量提供）
L90: baseUrl: z.string(),
L91: // OpenAI 兼容 API 的 base URL（必填）
...
L502: try {
L503: const raw = JSON.parse(readFileSync(this.configPath, "utf-8"));
L504: return ConfigSchema.parse(raw);
...
L4859: // src/tools/builtin/bash.ts
L4860: import { spawn } from "child_process";
L4861: import { existsSync as existsSync5, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
High
Remote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/electron-server.jsView on unpkg · L8964Detached bundled service listener: dist/electron-server.js launches a Node helper and exposes a broad-bound HTTP listener.
L64: import express from "express";
L65: import { createServer } from "http";
L66: import { WebSocketServer } from "ws";
...
L250: denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
L251: allowPrivateNetwork: z.boolean().default(false),
L252: tools: z.object({
...
L404: if (fixedEnvVar && fixedEnvVar !== dynamicEnvVar) {
L405: const fixedVal = process.env[fixedEnvVar];
L406: const dynVal = process.env[dynamicEnvVar];
L407: if (fixedVal && dynVal && fixedVal !== dynVal) {
L408: process.stderr.write(`[warn] env var collision: ${fixedEnvVar} and ${dynamicEnvVar} have different values for provider "${providerId}". Using ${fixedEnvVar}.
L409: `);
High
Spawned Bundled Service Listener
Source launches a detached bundled service that exposes a broad-bound HTTP listener.
dist/electron-server.jsView on unpkg · L6464import express from "express";
L65: import { createServer } from "http";
L66: import { WebSocketServer } from "ws";
...
L250: denyPorts: z.array(z.number().int().min(1).max(65535)).default([]),
L251: allowPrivateNetwork: z.boolean().default(false),
L252: tools: z.object({
...
L404: if (fixedEnvVar && fixedEnvVar !== dynamicEnvVar) {
L405: const fixedVal = process.env[fixedEnvVar];
L406: const dynVal = process.env[dynamicEnvVar];
L407: if (fixedVal && dynVal && fixedVal !== dynVal) {
L408: process.stderr.write(`[warn] env var collision: ${fixedEnvVar} and ${dynamicEnvVar} have different values for provider "${providerId}". Using ${fixedEnvVar}.
L409: `);
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/electron-server.jsView on unpkg · L64dist/web/client/vendor/tailwind.jsView file
1(()=>{var qv=Object.create;var Hi=Object.defineProperty;var $v=Object.getOwnPropertyDescriptor;var Lv=Object.getOwnPropertyNames;var Mv=Object.getPrototypeOf,Nv=Object.prototype.ha...
L2: `+S+n("^")}let b=i(h.replace(/\d/g," "))+f.slice(0,this.column-1).replace(/[^\t]/g," ");return n(">")+i(h)+s(f)+`
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/web/client/vendor/tailwind.jsView on unpkg · L1dist/chunk-VHY6NVMQ.jsView file
27{ kind: "anthropic-key", regex: /(sk-ant-[a-zA-Z0-9_-]{90,})/g },
L28: // L6 (v0.4.108): Zhipu / GLM API keys — `<24+ hex/base64-ish>.<32+>`
L29: // Two segments separated by a dot, each safely identifiable by length
...
L52: { kind: "bearer", regex: /\b(Authorization:\s*Bearer\s+)([a-zA-Z0-9_\-.=]{20,500})/g },
L53: // Private key PEM blocks — catch the header+footer together
L54: { kind: "private-key", regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g }
...
L135: function memoryIndexDir() {
L136: return path.join(os.homedir(), ".aicli", MEMORY_DIR_NAME);
L137: }
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/chunk-VHY6NVMQ.jsView on unpkg · L27dist/chunk-OPAOQZDC.jsView file
696package = jinzd-ai-cli; repositoryIdentity = ai-cli; dependency = undici
L696: try {
L697: const { ProxyAgent, setGlobalDispatcher } = await import("undici");
L698: setGlobalDispatcher(new ProxyAgent({ uri: proxyUrl }));
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/chunk-OPAOQZDC.jsView on unpkg · L696dist/wasm/tree-sitter-go.wasmView file
•path = dist/wasm/tree-sitter-go.wasm
kind = wasm_module
sizeBytes = 217182
magicHex = [redacted]
Medium
Findings
5 High6 Medium7 Low
HighChild Processdist/chunk-GH37CLOE.js
HighShelldist/electron-server.js
HighRemote Agent Bridgedist/electron-server.js
HighCopied Package Dependency Bridgedist/chunk-OPAOQZDC.js
HighSpawned Bundled Service Listenerdist/electron-server.js
MediumDynamic Requiredist/web/client/vendor/tailwind.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/electron-server.js
MediumShips Wasm Moduledist/wasm/tree-sitter-go.wasm
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/chunk-VHY6NVMQ.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings