registry / novel-agent-cli / 3.0.2

novel-agent-cli@3.0.2

AI Novel Agent v3.0.2 — Story Bible Graph × Character Agent×N × Timeline Synthesis × Review Agent (deAI/expand/rewrite/repair) × 4-stage pipeline. Terminal-based Chinese web novel creation assistant. New: review_repair tool + novel-rewrite-fix Skill for d

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 5.65 KB of source

Source & flagged code

3 flagged

package.jsonView file

Lines 1-38json

2 "name": "novel-agent-cli",

3 "version": "3.0.2",

4 "description": "AI Novel Agent v3.0.2 — Story Bible Graph × Character Agent×N × Timeline Synthesis × Review Agent (deAI/expand/rewrite/repair) × 4-stage pipeline. Terminal-based Chinese web novel creation assistant. New: review_repair tool + novel-rewrite-fix Skill for diagnosing and fixing underperforming chapters.",

5 "main": "install.js",

6 "publishConfig": {

7 "access": "public"

8 },

9 "bin": {

10 "novel-agent": "install.js"

11 },

12 "files": [

13 "install.js",

14 "dist/",

15 "README.md"

16 ],

17 "scripts": {

18 "postinstall": "node install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 },

20 "keywords": [

21 "ai",

22 "novel",

23 "writing",

24 "fiction",

25 "content-generation",

26 "chinese-web-novel",

27 "网文",

28 "AI写作",

29 "多Agent",

30 "llm",

31 "deepseek",

32 "rag",

33 "agent",

34 "multi-agent",

35 "sandbox",

36 "quality-check",

37 "check-chapter",

38 "fix-chapter",

dist/novel-agent_linux_amd64View file

•path = dist/novel-agent_linux_amd64 kind = native_binary sizeBytes = 18448546 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/novel-agent_linux_amd64View on unpkg

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = node install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code