registry / pixelweaver / 0.3.0

pixelweaver@0.3.0

Desktop-class pixel art sprite editor with a plugin system and MCP tools for AI agents — runs in a native window or the browser.

AI Security Review

scanned 19h ago · by lpm-firewall-ai

The user-invoked CLI shim passes concatenated arguments to a shell. Untrusted argument text can alter the command executed by the local user.

Static reason

No blocking static signals were detected.

Trigger

Running pixelweaver with attacker-controlled arguments.

Impact

Local arbitrary command execution in the invoking user's context.

Mechanism

shell command injection via execSync string interpolation

Rationale

No malicious install hook, exfiltration, or covert persistence was found, but the CLI wrapper contains a concrete local command-injection vulnerability. Flag as warn rather than block because it is not autonomous malicious behavior.

Evidence

package.jsonbin/pixelweaver.mjssrc/lib/core/plugin-loader.tssrc/lib/core/plugin-discovery.tssrc/lib/sync/sync-state.svelte.tssrc/lib/sync/project-manager.ts

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

bin/pixelweaver.mjs interpolates all CLI arguments into an execSync shell command.

pixelweaver@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code