registry / script-ads-validados-wisky / 1.2.2

script-ads-validados-wisky@1.2.2

Instalador licenciado da biblioteca Script Ads Validados Wisky para Codex, Claude Code e Google Antigravity

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 2 file(s), 11.7 KB of source

Source & flagged code

3 flagged

bin/install.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

3import {

4 cpSync,

5 existsSync,

6 mkdirSync,

7 readFileSync,

8 realpathSync,

9 readdirSync,

10 writeFileSync,

11} from "node:fs";

12import { spawnSync } from "node:child_process";

13import { homedir } from "node:os";

High

Child Process

Package source references child process execution.

bin/install.mjsView on unpkg · L11

14import path from "node:path";

15import process from "node:process";

16import { fileURLToPath } from "node:url";

17import { createInterface } from "node:readline/promises";

19export const PRODUCT = "script-ads-validados-wisky";

20export const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");

21export const KIT_PATHS = Object.freeze([

22 ".claude/commands/creative-ingest.md",

23 ".claude/commands/creative-ingest-batch.md",

24 ".claude/commands/creative-ingest-setup.md",

25 ".claude/commands/creative-models.md",

26 ".claude/commands/gerar-roteiro.md",

27 ".claude/commands/google-sheets-auth.md",

28 ".claude/skills/creative-ingest/SKILL.md",

29 ".claude/skills/creative-ingest-batch/SKILL.md",

30 ".claude/skills/creative-ingest-setup/SKILL.md",

31 ".claude/skills/creative-models/SKILL.md",

scripts/run-python.mjsView file

Lines 17-54javascript

17 "setup_kit.py",

18 "validate_library.py",

19]);

21function runtimePython() {

22 const candidates =

23 process.platform ===

scripts/setup_kit.pyView file

•path = scripts/setup_kit.py kind = build_helper sizeBytes = 1095 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup_kit.pyView on unpkg

Source & flagged code

3 flagged · loading source

bin/install.mjsView file

11} from "node:fs"; L12: import { spawnSync } from "node:child_process"; L13: import { homedir } from "node:os";

High

Child Process

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code