registry / kaijibot / 2026.7.5

kaijibot@2026.7.5

⚠ Under review

Proactive cognitive AI assistant — learns your interests, pushes insights, evolves skills autonomously

Static Scan Results

scanned 4mo ago · by rust-scanner

Static analysis flagged 29 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

WildcardDependency

scanned 2,551 file(s), 21.7 MB of source, external domains: 127.0.0.1, 169.254.169.254, accounts.google.com, accounts.openai.com, ai-gateway.vercel.sh, ai.azure.com, aiplatform.googleapis.com, aistudio.google.com, angular.io, api.ant-ling.com, api.anthropic.com, api.arcee.ai, api.cerebras.ai, api.chutes.ai, api.cloudflare.com, api.copilot.example, api.deepinfra.com, api.deepseek.com, api.dev.runwayml.com, api.exa.ai, api.example.com, api.fireworks.ai, api.github.com, api.gradium.ai, api.groq.com, api.individual.githubcopilot.com, api.kilo.ai, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.perplexity.ai, api.push.apple.com, api.sandbox.push.apple.com, api.stepfun.ai, api.stepfun.com, api.tavily.com, api.together.ai, api.together.xyz, api.venice.ai, api.voyageai.com, api.x.ai, api.xiaomimimo.com, api.z.ai, ark.ap-southeast.bytepluses.com, ark.cn-beijing.volces.com, auth.openai.com

Oversized source lightweight scan

dist/extensions/diffs/assets/viewer-runtime.js9.41 MB file, sampled 256 KB

Source & flagged code

17 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/server.impl-BF4AP3rO.jsView file

214import path, { join } from "node:path"; L215: import { execFile, spawn } from "node:child_process"; L216: import os, { homedir, networkInterfaces } from "node:os";

High

Child Process

Package source references child process execution.

dist/server.impl-BF4AP3rO.jsView on unpkg · L214

66import { i as resolveAssistantAvatarUrl, n as buildControlUiAvatarUrl, r as normalizeControlUiBasePath, t as CONTROL_UI_AVATAR_PREFIX } from "./control-ui-shared-Bc-WqNwr.js"; L67: import { $ as [redacted], Dt as validateSecretsResolveResult, Et as validateSecretsResolveParams, Q as validateExecApprovalGetParams, R as validateConnectPar... L68: import { o as verifyDeviceSignature, r as [redacted], t as deriveDeviceIdFromPublicKey } from "./device-identity-30GOjRxB.js";

High

Shell

Package source references shell execution.

dist/server.impl-BF4AP3rO.jsView on unpkg · L66

51Cross-file remote execution chain: dist/server.impl-BF4AP3rO.js spawns dist/pi-embedded-runner-D3WElbXz.js; helper contains network access plus dynamic code execution. L51: import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Dm77FjQh.js"; L52: import { _ as resolveRequestClientIp, a as isLoopbackHost, g as resolveHostName, h as resolveGatewayListenHosts, i as isLoopbackAddress, l as isTrustedProxyAddress, m as resolveGat... L53: import { c as AUTH_RATE_LIMIT_SCOPE_DEVICE_TOKEN, d as createAuthRateLimiter, f as normalizeRateLimitClientIp, i as isLocalDirectRequest, l as AUTH_RATE_LIMIT_SCOPE_HOOK_AUTH, n as... ... L66: import { i as resolveAssistantAvatarUrl, n as buildControlUiAvatarUrl, r as normalizeControlUiBasePath, t as CONTROL_UI_AVATAR_PREFIX } from "

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/server.impl-BF4AP3rO.jsView on unpkg · L51

232function [redacted]() { L233: [redacted] ??= import("./exec-approval-forwarder.runtime-fW7QAWjz.js"); L234: return [redacted];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server.impl-BF4AP3rO.jsView on unpkg · L232

dist/control-ui/assets/index-T9pDybqW.jsView file

973contains invisible/control Unicode U+200D (zero width joiner) `}var Ky=50,qy=class{constructor(){this.items=[],this.cursor=-1}push(e){let t=e.trim();t&&this.items[this.items.length-1]!==t&&(this.items.push(t),this.items.length>Ky&&this.items.shift(),this.cursor=-1)}up(){return this.items.length===0?

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-T9pDybqW.jsView on unpkg · L973

skills/video-frames/scripts/frame.shView file

•path = skills/video-frames/scripts/frame.sh kind = build_helper sizeBytes = 1347 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/video-frames/scripts/frame.shView on unpkg

dist/extensions/diffs/assets/viewer-runtime.jsView file

•path = [redacted]-runtime.js kind = oversized_source_file sizeBytes = 9867326 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/extensions/diffs/assets/viewer-runtime.jsView on unpkg

docs/install/macos-vm.mdView file

219patternName = generic_password severity = medium line = 219 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/install/macos-vm.md

docs/install/macos-vm.mdView on unpkg · L219

docs/help/faq.mdView file

2691patternName = generic_password severity = medium line = 2691 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L2691

docs/gateway/tailscale.mdView file

90patternName = generic_password severity = medium line = 90 matchedText = auth: { ..." },

Medium

Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L90

docs/gateway/configuration-reference.mdView file

714patternName = generic_password severity = medium line = 714 matchedText = password...D}",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L714

2843patternName = generic_password severity = medium line = 2843 matchedText = // passw...WORD

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L2843

2870patternName = generic_password severity = medium line = 2870 matchedText = // passw...rd",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L2870

docs/channels/bluebubbles.mdView file

44patternName = generic_password severity = medium line = 44 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/bluebubbles.md

docs/channels/bluebubbles.mdView on unpkg · L44

docs/channels/matrix.mdView file

140patternName = generic_password severity = medium line = 140 matchedText = password...cret

Medium

Secret Pattern

Hardcoded password in docs/channels/matrix.md

docs/channels/matrix.mdView on unpkg · L140

docs/channels/irc.mdView file

203patternName = generic_password severity = medium line = 203 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/channels/irc.md

docs/channels/irc.mdView on unpkg · L203

Source & flagged code

17 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/server.impl-BF4AP3rO.jsView file

214import path, { join } from "node:path"; L215: import { execFile, spawn } from "node:child_process"; L216: import os, { homedir, networkInterfaces } from "node:os";

High

Child Process

Package source references child process execution.

dist/server.impl-BF4AP3rO.jsView on unpkg · L214

Findings

1 Critical5 High16 Medium7 Low

CriticalTrojan Source Unicodedist/control-ui/assets/index-T9pDybqW.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/server.impl-BF4AP3rO.js

HighShelldist/server.impl-BF4AP3rO.js

HighCross File Remote Execution Contextdist/server.impl-BF4AP3rO.js

HighOversized Source Filedist/extensions/diffs/assets/viewer-runtime.js

MediumDynamic Requiredist/server.impl-BF4AP3rO.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Build Helperskills/video-frames/scripts/frame.sh

MediumStructural Risk Force Deep Review

Medium

Affected versions and remediation

This report applies to kaijibot@2026.7.5.

See all versions of kaijibot for other recorded verdicts.

Review the evidence and your use of kaijibot@2026.7.5 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-04 16:40:50.319Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.