ryugi-artifacts@1.13.1

Server and viewer for the Ryugi artifacts app

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The inspected source supports ordinary viewer, project-server, and explicit CLI configuration behavior. Scanner flags for process execution, secrets, and invisible Unicode did not establish an attack: the process calls serve CLI operations, the frontend strings include public service configuration, and the flagged file is a localized UI bundle.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The CLI runs when a user invokes its command; the package build hook runs before publishing.

Impact

No confirmed unauthorized data transfer, destructive action, persistence, or agent control-surface change was established.

Mechanism

The CLI starts its own server, manages project-local state, and makes requests to that server. The manifest does not define an install-time hook.

AI rationale

Evidence

package.jsonbin/ryugi-artifacts.cjsdist/cli.cjs

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package has a prepublishOnly build hook, with no install-time lifecycle hook in its manifest.
The CLI starts its bundled server when invoked and stores its state under the selected project’s .ryugi/artifacts directory.
Agent environment markers are recorded to the project’s server state; auto-publish configuration changes only when the CLI receives the corresponding option.
The viewer bundles reference Excalidraw services and frontend modules; the flagged language file contains localized interface strings.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 603 file(s), 20.9 MB of source, external domains: app.excalidraw.com, artifacts.local, avatars.githubusercontent.com, base-ui.com, chevrotain.io, discord.gg, docs.excalidraw.com, embed.reddit.com, en.wikipedia.org, esm.sh, excalidraw-room-persistence.firebaseio.com, giphy.com, gist.github.com, github.com, gravatar.com, json.excalidraw.com, langium.org, libraries.excalidraw.com, mermaid.js.org, oss-ai.excalidraw.com, oss-collab.excalidraw.com, platform.twitter.com, player.vimeo.com, plus.excalidraw.com, react.dev, reddit.com, registry.npmmirror.com, rolldown.rs, ryugi.innei.dev, twitter.com, unpkg.com, us-central1-excalidraw-room-persistence.cloudfunctions.net, www.figma.com, www.w3.org, www.youtube.com, x.com, youtube.com

Source & flagged code

8 flagged

dist/viewer/prod-CxvgXXgp.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/viewer/prod-CxvgXXgp.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/viewer/prod-CxvgXXgp.js

dist/viewer/prod-CxvgXXgp.jsView on unpkg · L2

dist/cli.cjsView file

Lines 6-46javascript

6var __getOwnPropNames = Object.getOwnPropertyNames;

7var __getProtoOf = Object.getPrototypeOf;

8var __hasOwnProp = Object.prototype.hasOwnProperty;

9var __copyProps = (to, from, except, desc) => {

10 if (from && typeof from === "object" || typeof from === "function") {

11 for (let key of __getOwnPropNames(from))

12 if (!__hasOwnProp.call(to, key) && key !== except)

13 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

14 }

15 return to;

16};

17var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

18 // If the importer is in node compatibility mode or this is not an ESM

19 // file that has been converted to a CommonJS file using a Babel-

20 // compatible transform (i.e. "__esModule" has not been set), then set

21 // "default" to the CommonJS "module.exports" for node compatibility.

22 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

23 mod

24));

26// src/cli/main.ts

27var import_node_child_process3 = require("node:child_process");

28var import_node_util = require("node:util");

High

Child Process

Package source references child process execution.

dist/cli.cjsView on unpkg · L26

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli.cjsView on unpkg · L26

30// src/cli/comment.ts

31var import_node_fs3 = __toESM(require("node:fs"), 1);

33// src/server/agent.ts

34var NAMES = {

35 claude: "Claude Code",

36 "claude-code": "Claude Code",

37 cowork: "Claude Cowork",

38 codex: "Codex",

39 cursor: "Cursor",

40 "cursor-cli": "Cursor",

41 gemini: "Gemini CLI",

42 "gemini-cli": "Gemini CLI",

43 "github-copilot": "GitHub Copilot",

44 "github-copilot-cli": "GitHub Copilot",

45 kilo: "Kilo Code",

46 opencode: "OpenCode",

bin/ryugi-artifacts.cjsView file

Lines 1-3javascript

1#!/usr/bin/env node

2require('../dist/cli.cjs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ryugi-artifacts.cjsView on unpkg · L1

dist/viewer/ku-TR-6OUDTVRD-CGsGxS1P.jsView file

Lines 1-9javascript

1import"./prod-CxvgXXgp.js";var e={paste:`دانانەوە`,pasteAsPlaintext:`دایبنێ وەک دەقی سادە`,pasteCharts:`دانانەوەی خشتەکان`,selectAll:`دیاریکردنی هەموو`,multiSelect:`زیادکردنی بۆ دیاریکراوەکان`,moveCanvas:`تابلۆ بجوڵێنە`,cut:`بڕین`,copy:`لەبەرگرتنەوە`,copyAsPng:`PNGلەبەرگرتنەوە بۆ تەختەنووس وەک`,copyAsSvg:`SVGلەبەرگرتنەوە بۆ تەختەنووس وەک`

dist/viewer/DocumentLayout-9ziWsfNL.jsView file

•path = dist/viewer/DocumentLayout-9ziWsfNL.js kind = oversized_source_file sizeBytes = 7545036 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/viewer/DocumentLayout-9ziWsfNL.jsView on unpkg

dist/cli.cjs#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli.cjs#virtual:string-array:round1View on unpkg

Source & flagged code

8 flagged · loading source

dist/viewer/prod-CxvgXXgp.jsView file

2patternName = google_api_key severity = high line = 2

High

High Secret

Package contains a high-severity secret pattern.

dist/viewer/prod-CxvgXXgp.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2

High

Secret Pattern

Google API key in dist/viewer/prod-CxvgXXgp.js

dist/viewer/prod-CxvgXXgp.jsView on unpkg · L2

dist/cli.cjsView file

26// src/cli/main.ts L27: var import_node_child_process3 = require("node:child_process"); L28: var import_node_util = require("node:util");

High

Child Process

Package source references child process execution.

dist/cli.cjsView on unpkg · L26

Findings

1 Critical5 High5 Medium6 Low

CriticalTrojan Source Unicodedist/viewer/ku-TR-6OUDTVRD-CGsGxS1P.js

HighHigh Secretdist/viewer/prod-CxvgXXgp.js

HighChild Processdist/cli.cjs

HighCross File Remote Execution Contextdist/cli.cjs

HighSemantic Analysis Limiteddist/cli.cjs#virtual:string-array:round1

HighSecret Patterndist/viewer/prod-CxvgXXgp.js

MediumDynamic Requirebin/ryugi-artifacts.cjs

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/viewer/DocumentLayout-9ziWsfNL.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

Affected versions and remediation

This report applies to ryugi-artifacts@1.13.1.

See all versions of ryugi-artifacts for other recorded verdicts.

Review the evidence and your use of ryugi-artifacts@1.13.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-21 11:33:01.785Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.