registry / markdown-explorer / 0.1.4

markdown-explorer@0.1.4

Browse and read the markdown files in any directory, in your browser. Three panes: file tree, rendered document, heading outline.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The user-invoked CLI serves and optionally edits Markdown files within a selected local root.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs `mdv [directory]`; edits require browser actions against its local server.

Impact

Can modify Markdown files under the user-selected root as an intended interactive feature; no unconsented execution or exfiltration was found.

Mechanism

Local Markdown browser/editor with constrained filesystem operations.

Rationale

Direct inspection shows a user-invoked local Markdown explorer/editor, not an install-time or stealth execution chain. Scanner flags are explained by bundled Mermaid, normal local-server APIs, and a BOM character rather than Trojan Source controls.

Evidence

package.jsonbin/cli.jssrc/server.jssrc/paths.jssrc/render.jssrc/write.jspublic/app.jspublic/vendor/VERSION

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

`bin/cli.js` starts a local HTTP server only when the user runs `mdv`.

markdown-explorer@0.1.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code