registry / rose-aili / 0.1.11

rose-aili@0.1.11

AILI OpenCode workflow installer CLI

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 49.3 KB of source

Source & flagged code

4 flagged

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView file

•path = .agents/skills/minimax-pdf/scripts/fill_inspect.py kind = payload_in_excluded_dir sizeBytes = 6402 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView on unpkg

•path = .agents/skills/minimax-pdf/scripts/fill_inspect.py kind = build_helper sizeBytes = 6402 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView on unpkg

.agents/skills/react-native-dev/references/forms.mdView file

Lines 277-301markdown

277it("validates required fields", async () => {

278 render(<LoginForm onSubmit={jest.fn()} />);

279 fireEvent.press(screen.getByText("Login")); // Submit without filling

280

281 await waitFor(() => {

282 expect(screen.getByText("Invalid email")).toBeTruthy();

283 expect(screen.getByText("Min 8 characters")).toBeTruthy();

284 });

285});

286

287it("submits with valid data", async () => {

288 const onSubmit = jest.fn();

289 const user = userEvent.setup();

290 render(<LoginForm onSubmit={onSubmit} />);

291

292 await user.type(screen.getByPlaceholderText("Email"), "user@example.com");

293 await user.type(screen.getByPlaceholderText("Password"), "password123");

294 await user.press(screen.getByText("Login"));

295

296 await waitFor(() => {

297 expect(onSubmit).toHaveBeenCalledWith({ email: "user@example.com", password: "password123" });

Medium

Secret Pattern

Hardcoded password in .agents/skills/react-native-dev/references/forms.md

.agents/skills/react-native-dev/references/forms.mdView on unpkg · L297

298 });

299});

300```

301

.agents/skills/react-native-dev/references/testing.mdView file

Lines 75-115markdown

76// Non-existence

77expect(screen.queryByText("Error")).toBeNull();

78```

80### User Events

82```tsx

83import { userEvent } from "@testing-library/react-native";

85it("submits form on valid input", async () => {

86 const user = userEvent.setup();

87 render(<LoginForm onSubmit={mockSubmit} />);

Source & flagged code

4 flagged · loading source

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView file

•path = .agents/skills/minimax-pdf/scripts/fill_inspect.py kind = payload_in_excluded_dir sizeBytes = 6402 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView on unpkg

•path = .agents/skills/minimax-pdf/scripts/fill_inspect.py kind = build_helper sizeBytes = 6402 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView on unpkg

.agents/skills/react-native-dev/references/forms.mdView file

297patternName = generic_password severity = medium line = 297 matchedText = expect(o... });

Medium

Secret Pattern

Hardcoded password in .agents/skills/react-native-dev/references/forms.md

.agents/skills/react-native-dev/references/forms.mdView on unpkg · L297

.agents/skills/react-native-dev/references/testing.mdView file

95patternName = generic_password severity = medium line = 95 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in .agents/skills/react-native-dev/references/testing.md

.agents/skills/react-native-dev/references/testing.mdView on unpkg · L95

Findings

1 High5 Medium4 Low

HighPayload In Excluded Dir.agents/skills/minimax-pdf/scripts/fill_inspect.py

MediumEnvironment Vars

MediumShips Build Helper.agents/skills/minimax-pdf/scripts/fill_inspect.py

MediumStructural Risk Force Deep Review

MediumSecret Pattern.agents/skills/react-native-dev/references/forms.md

MediumSecret Pattern.agents/skills/react-native-dev/references/testing.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

4 flagged

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView file

•path = .agents/skills/minimax-pdf/scripts/fill_inspect.py kind = payload_in_excluded_dir sizeBytes = 6402 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView on unpkg

•path = .agents/skills/minimax-pdf/scripts/fill_inspect.py kind = build_helper sizeBytes = 6402 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/minimax-pdf/scripts/fill_inspect.pyView on unpkg

.agents/skills/react-native-dev/references/forms.mdView file

Lines 277-301markdown

277it("validates required fields", async () => {

278 render(<LoginForm onSubmit={jest.fn()} />);

279 fireEvent.press(screen.getByText("Login")); // Submit without filling

280

281 await waitFor(() => {

282 expect(screen.getByText("Invalid email")).toBeTruthy();

283 expect(screen.getByText("Min 8 characters")).toBeTruthy();

284 });

285});

286

287it("submits with valid data", async () => {

288 const onSubmit = jest.fn();

289 const user = userEvent.setup();

290 render(<LoginForm onSubmit={onSubmit} />);

291

292 await user.type(screen.getByPlaceholderText("Email"), "user@example.com");

293 await user.type(screen.getByPlaceholderText("Password"), "password123");

294 await user.press(screen.getByText("Login"));

295

296 await waitFor(() => {

297 expect(onSubmit).toHaveBeenCalledWith({ email: "user@example.com", password: "password123" });

Medium

Secret Pattern

Hardcoded password in .agents/skills/react-native-dev/references/forms.md

.agents/skills/react-native-dev/references/forms.mdView on unpkg · L297

298 });

299});

300```

301

.agents/skills/react-native-dev/references/testing.mdView file

Lines 75-115markdown

76// Non-existence

77expect(screen.queryByText("Error")).toBeNull();

78```

80### User Events

82```tsx

83import { userEvent } from "@testing-library/react-native";

85it("submits form on valid input", async () => {

86 const user = userEvent.setup();

87 render(<LoginForm onSubmit={mockSubmit} />);