registry / publishport-opencli / 1.8.5-pp.10

publishport-opencli@1.8.5-pp.10

Make any website or Electron App your CLI. AI-powered.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. The package has install-time filesystem writes, but they are scoped to OpenCLI shell completion/setup and adapter metadata for global installs.

Static reason

One or more suspicious static signals were detected.

Trigger

global npm install, uninstall, or user-invoked opencli commands

Impact

Creates or updates OpenCLI config/completion files; no credential harvesting, remote payload fetch, or covert exfiltration confirmed.

Mechanism

OpenCLI completion/setup, adapter override cleanup, and user-command browser/network integrations

Rationale

Static source inspection shows lifecycle hooks and powerful CLI primitives, but the observed install actions are package-aligned setup/cleanup and user-invoked OpenCLI functionality. I found no unconsented credential collection, remote payload execution, persistence beyond completions/config, or non-local exfiltration path.

Evidence

package.jsonscripts/postinstall.jsscripts/fetch-adapters.jsdist/src/main.jsdist/src/external.jsdist/src/browser/article-extract.jsdist/src/discovery.jsclis/flomo/memos.js~/.zsh/completions/_opencli~/.bash_completion.d/opencli~/.config/fish/completions/opencli.fish~/.opencli/spotify.env~/.opencli/adapter-manifest.json~/.opencli/clis/

Network endpoints3

127.0.0.1:19825/shutdowngithub.com/jackwener/opencli/releasesdeveloper.spotify.com/dashboard

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json defines postinstall and preuninstall lifecycle hooks.
scripts/postinstall.js writes shell completion files and ~/.opencli/spotify.env template on global install.
scripts/fetch-adapters.js can delete stale ~/.opencli/clis overrides and writes ~/.opencli/adapter-manifest.json on global/explicit install.

Evidence against

postinstall skips non-global installs and CI, writes package-aligned completions/templates, and does not alter shell rc files.
scripts/fetch-adapters.js states no network calls and only hashes bundled clis/ to clean OpenCLI override files.
package.json main/bin are OpenCLI CLI entrypoints; preuninstall only POSTs to localhost 127.0.0.1:19825/shutdown.
dist/src/external.js child_process usage is for checking/install commands for external CLIs, gated by user-invoked CLI behavior.
dist/src/browser/article-extract.js builds in-page Readability extraction code from dependency files; no exfiltration found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 1,545 file(s), 4.72 MB of source, external domains: 127.0.0.1, 36kr.com, a.example, account.dianping.com, accounts.douban.com, accounts.google.com, accounts.pixiv.net, accounts.spotify.com, admin.xiaoe-tech.com, api.bilibili.com, api.chess.com, api.coingecko.com, api.dictionaryapi.dev, api.fda.gov, api.github.com, api.juejin.cn, api.llama.fi, api.m.jd.com, api.manus.im, api.npmjs.org, api.nuget.org, api.openalex.org, api.osv.dev, api.ruguoapp.com, api.semanticscholar.org, api.slock.ai, api.spotify.com, api.stackexchange.com, api.tvmaze.com, api.xiaoyuzhoufm.com, api.zhihu.com, api.zsxq.com, api2.mubu.com, api2.openreview.net, apiv1.oschina.net, app.cj.sina.com.cn, app.slock.ai, appxxxx.h5.xet.citv.cn, archive.org, arxiv.org, assets.grok.com, auth.1point3acres.com, auth.band.us, auth.openai.com, azuresearch-usnc.nuget.org, baijiahao.baidu.com, bbs.hupu.com, bid.powerchina.cn, bizapi.csdn.net, blog.51cto.com

Source & flagged code

9 flagged

package.jsonView file

Lines 37-77json

37 "docs/guide/",

38 "skills/opencli-*/**",

39 "cli-manifest.json",

40 "scripts/",

41 "README.md",

42 "LICENSE"

43 ],

44 "scripts": {

45 "dev": "tsx src/main.ts",

46 "dev:bun": "bun src/main.ts",

47 "release": "npm version prerelease --preid pp -m \"[pp-only] chore(release): %s\" && git push origin HEAD && git push origin \"$(git describe --tags --abbrev=0)\"",

48 "build": "npm run clean-dist && npm run copy-yaml && npm run build-manifest",

49 "minify:release": "bun scripts/minify-release.mjs",

50 "prebuild-manifest": "tsc --build && node -e \"require('fs').chmodSync('dist/src/main.js', 0o755)\"",

51 "build-manifest": "tsx src/build-manifest.ts",

52 "clean-dist": "node scripts/clean-dist.cjs",

53 "copy-yaml": "node scripts/copy-yaml.cjs",

54 "start": "node dist/src/main.js",

55 "start:bun": "bun dist/src/main.js",

56 "preuninstall": "node -e \"fetch('http://127.0.0.1:19825/shutdown',{method:'POST',headers:{'X-OpenCLI':'1'},signal:AbortSignal.timeout(3000)}).catch(()=>{})\" || true",

57 "postinstall": "node scripts/postinstall.js || true; node scripts/fetch-adapters.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L57

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L57

58 "typecheck": "tsc --noEmit",

59 "prepare": "[ -d src ] && npm run build || true",

60 "prepublishOnly": "npm run build",

61 "test": "vitest run --project unit --project extension --project adapter",

62 "test:bun": "bun vitest run --project unit --project extension --project adapter",

63 "test:adapter": "vitest run --project adapter",

64 "test:all": "vitest run",

65 "test:e2e": "vitest run --project e2e-fixed-port --project e2e",

66 "advise:listing-id-pairing": "node scripts/check-listing-id-pairing.mjs",

67 "check:silent-column-drop": "node scripts/check-silent-column-drop.mjs",

68 "check:typed-error-lint": "node scripts/check-typed-error-lint.mjs",

69 "docs:dev": "vitepress dev docs",

70 "docs:build": "vitepress build docs",

71 "docs:preview": "vitepress preview docs"

72 },

73 "keywords": [

74 "cli",

75 "browser",

76 "web",

77 "ai"

dist/src/external.jsView file

Lines 1-1javascript

1import*as Q from"node:fs";import*as Y from"node:path";import*as V from"node:os";import{fileURLToPath as M}from"node:url";import{spawnSync as U,execFileSync as L}from"node:child_process";import $ from"js-yaml";import

dist/src/browser/article-extract.jsView file

Lines 1-2javascript

1import*as j from"node:fs";import{createRequire as O}from"node:module";const v=O(import.meta.url);let Y=null;function U(){if(Y)return Y

dist/src/discovery.jsView file

Lines 1-2javascript

clis/flomo/memos.jsView file

Lines 1-13javascript

scripts/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3/**

4 * postinstall script — install shell completion files and print setup instructions.

5 *

6 * Detects the user's default shell and writes the completion script to the

7 * standard completion directory. For zsh and bash, the script prints manual

8 * instructions instead of modifying rc files (~/.zshrc, ~/.bashrc) — this

9 * avoids breaking multi-line shell commands and other fragile rc structures.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/postinstall.jsView on unpkg · L7

dist/src/launcher.jsView file

Lines 1-7javascript

scripts/check-doc-coverage.shView file

•path = scripts/check-doc-coverage.sh kind = build_helper sizeBytes = 2256 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-doc-coverage.shView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js || true; node scripts/fetch-adapters.js || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js || true; node scripts/fetch-adapters.js || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/src/external.jsView file

1import*as Q from"node:fs";import*as Y from"node:path";import*as V from"node:os";import{fileURLToPath as M}from"node:url";import{spawnSync as U,execFileSync as L}from"node:child_pro...

High

Child Process

Package source references child process execution.

dist/src/external.jsView on unpkg · L1

dist/src/browser/article-extract.jsView file

1import*as j from"node:fs";import{createRequire as O}from"node:module";const v=O(import.meta.url);let Y=null;function U(){if(Y)return Y;const Q=v.resolve("@mozilla/readability/Reada... L2: `)}export async function extractArticle(Q,V={}){const Z=buildExtractArticleJs(V),W=await Q.evaluate(Z);if(W==null||typeof W!=="object")return null;const z=W;if(typeof z.html!=="str...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/browser/article-extract.jsView on unpkg · L1

dist/src/discovery.jsView file

1import*as H from"node:fs";import*as G from"node:os";import*as Y from"node:path";import{fileURLToPath as F,pathToFileURL as v}from"node:url";import{Strategy as A,registerCommand as ... L2: `;try{if(await H.promises.readFile(x,"utf-8")!==B)await H.promises.writeFile(x,B,"utf-8")}catch{await H.promises.writeFile(x,B,"utf-8")}const V=L,q=Y.join(z,"node_modules","@jackwe...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/src/discovery.jsView on unpkg · L1

clis/flomo/memos.jsView file

1import{cli as y,Strategy as A}from"@jackwener/opencli/registry";import{ArgumentError as m,AuthRequiredError as l,CommandExecutionError as s,EmptyResultError as b}from"@jackwener/op... L2: (() => { ... L5: if (!raw) return null; L6: const me = JSON.parse(raw); L7: const token = me?.access_token || me?.data?.access_token || ''; ... L12: })() L13: `}function P(t){return/auth|unauth|login|token|permission|forbidden|unauthorized|登录|登陆|鉴权|权限/i.test(String(t||""))}function $(t){if(!Array.isArray(t))return"";return t.map((e)=>{if...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

clis/flomo/memos.jsView on unpkg · L1

scripts/postinstall.jsView file

7* standard completion directory. For zsh and bash, the script prints manual L8: * instructions instead of modifying rc files (~/.zshrc, ~/.bashrc) — this L9: * avoids breaking multi-line shell commands and other fragile rc structures. ... L60: function detectShell() { L61: const shell = process.env.SHELL || ''; L62: if (shell.includes('zsh')) return 'zsh'; ... L77: // Skip in CI environments L78: if (process.env.CI || process.env.CONTINUOUS_INTEGRATION) { L79: return; ... L93: L94: const home = homedir(); L95:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/postinstall.jsView on unpkg · L7

dist/src/launcher.jsView file

1import{execFileSync as B,spawn as w}from"node:child_process";import{request as D}from"node:http";import*as K from"node:path";import{getElectronApp as U}from"./electron-apps.js";imp... L2: ${j(W,J)} L3: `+` • Set OPENCLI_CDP_ENDPOINT=http://127.0.0.1:${J} L4: `+` • Or just re-run the command once ${W} is listening on port ${J}.`);if(detectProcess(X)){G.debug(`[launcher] ${W} is running but CDP not available`);if(!await q(`${W} is runni... L5: `);await killProcess(X)}const H=discoverAppPath(W);if(!H)throw new $(`Could not find ${W} on this machine.`,`Install ${W} or register a custom path in ~/.opencli/apps.yaml`);const ...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/src/launcher.jsView on unpkg · L1

scripts/check-doc-coverage.shView file

•path = scripts/check-doc-coverage.sh kind = build_helper sizeBytes = 2256 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-doc-coverage.shView on unpkg

Findings

3 High7 Medium10 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/src/external.js

HighCommand Output Exfiltrationdist/src/launcher.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/src/discovery.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencescripts/postinstall.js

MediumShips Build Helperscripts/check-doc-coverage.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/src/browser/article-extract.js

LowWeak Cryptoclis/flomo/memos.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

package.jsonView file

Lines 37-77json

37 "docs/guide/",

38 "skills/opencli-*/**",

39 "cli-manifest.json",

40 "scripts/",

41 "README.md",

42 "LICENSE"

43 ],

44 "scripts": {

45 "dev": "tsx src/main.ts",

46 "dev:bun": "bun src/main.ts",

47 "release": "npm version prerelease --preid pp -m \"[pp-only] chore(release): %s\" && git push origin HEAD && git push origin \"$(git describe --tags --abbrev=0)\"",

48 "build": "npm run clean-dist && npm run copy-yaml && npm run build-manifest",

49 "minify:release": "bun scripts/minify-release.mjs",

50 "prebuild-manifest": "tsc --build && node -e \"require('fs').chmodSync('dist/src/main.js', 0o755)\"",

51 "build-manifest": "tsx src/build-manifest.ts",

52 "clean-dist": "node scripts/clean-dist.cjs",

53 "copy-yaml": "node scripts/copy-yaml.cjs",

54 "start": "node dist/src/main.js",

55 "start:bun": "bun dist/src/main.js",

56 "preuninstall": "node -e \"fetch('http://127.0.0.1:19825/shutdown',{method:'POST',headers:{'X-OpenCLI':'1'},signal:AbortSignal.timeout(3000)}).catch(()=>{})\" || true",

57 "postinstall": "node scripts/postinstall.js || true; node scripts/fetch-adapters.js || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L57

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L57

58 "typecheck": "tsc --noEmit",

59 "prepare": "[ -d src ] && npm run build || true",

60 "prepublishOnly": "npm run build",

61 "test": "vitest run --project unit --project extension --project adapter",

62 "test:bun": "bun vitest run --project unit --project extension --project adapter",

63 "test:adapter": "vitest run --project adapter",

64 "test:all": "vitest run",

65 "test:e2e": "vitest run --project e2e-fixed-port --project e2e",

66 "advise:listing-id-pairing": "node scripts/check-listing-id-pairing.mjs",

67 "check:silent-column-drop": "node scripts/check-silent-column-drop.mjs",

68 "check:typed-error-lint": "node scripts/check-typed-error-lint.mjs",

69 "docs:dev": "vitepress dev docs",

70 "docs:build": "vitepress build docs",

71 "docs:preview": "vitepress preview docs"

72 },

73 "keywords": [

74 "cli",

75 "browser",

76 "web",

77 "ai"

dist/src/external.jsView file

Lines 1-1javascript

dist/src/browser/article-extract.jsView file

Lines 1-2javascript

1import*as j from"node:fs";import{createRequire as O}from"node:module";const v=O(import.meta.url);let Y=null;function U(){if(Y)return Y

dist/src/discovery.jsView file

Lines 1-2javascript

clis/flomo/memos.jsView file

Lines 1-13javascript

scripts/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3/**

4 * postinstall script — install shell completion files and print setup instructions.

5 *

6 * Detects the user's default shell and writes the completion script to the

7 * standard completion directory. For zsh and bash, the script prints manual

8 * instructions instead of modifying rc files (~/.zshrc, ~/.bashrc) — this

9 * avoids breaking multi-line shell commands and other fragile rc structures.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/postinstall.jsView on unpkg · L7

dist/src/launcher.jsView file

Lines 1-7javascript

scripts/check-doc-coverage.shView file

•path = scripts/check-doc-coverage.sh kind = build_helper sizeBytes = 2256 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check-doc-coverage.shView on unpkg