registry / redsea-cli / 0.1.0

redsea-cli@0.1.0

⚠ Under review

红海云企业数据与接口统一 CLI(redsea-cli)

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 12 file(s), 31.3 KB of source, external domains: api-catalog-test.redsea.internal, api-catalog.redsea.internal, attendance-test.redsea.internal, attendance.redsea.internal, flow-test.redsea.internal, flow.redsea.internal, hr-test.redsea.internal, hr.redsea.internal, report-test.redsea.internal, report.redsea.internal, sso-test.redsea.internal, sso.redsea.com, sso.redsea.internal, ticket-test.redsea.internal, ticket.redsea.internal

Source & flagged code

2 flagged

dist/commands/skill.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: killfile(dir) { fs.mkdirsync(dir, { recursive: true }); const file = path.join(dir, 'skill.md'); fs.writefilesync(file, skill_md); return file; } function installagentsmd() { const file = 'agents.md'; const start = ''; const end = ''; const block = `${start}\n${agents_snippet}${end}`; const existing = fs.existssync(file) ? fs.readfilesync(file, 'utf8') : ''; if (existing.includes(start) && existing.includes(end)) { const updated = existing.slice(0, existing.indexof(start)) + block + existing.slice(existing.indexof(end)

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/skill.jsView on unpkg

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import os from 'node:os'; import path from 'node:path'; import { fail } from '../output.js'; import { agents_snippet, skill_md } from '../sk[redacted]'; function writeskillfile(dir) { fs.mkdirsync(dir, { recursive: true }); const file = path.join(dir, 'skill.md'); fs.writefilesync(file, skill_md); return file; } function installagentsmd() { const file = 'agents.md'; const start = ''; const end = ''; const block = `${start}\n${agents_snippet}${end}`; const existing = fs.existssync(fil

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/commands/skill.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/commands/skill.jsView file

redsea-cli@0.1.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code