Static Scan Results
scanned 3h ago · by rust-scannerStatic analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flagged · loading sourcebin/sb-test.jsView file
3import { program } from "commander";
L4: import { spawn } from "child_process";
L5: import path from "path";
High
19stdio: "inherit",
L20: shell: true
L21: });
High
17return new Promise((resolve, reject) => {
L18: const child = spawn("npx", ["playwright", "install", "webkit", "chromium"], {
L19: stdio: "inherit",
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/sb-test.jsView on unpkg · L1710L11: const require = createRequire(import.meta.url);
L12: const pkg = require("../package.json");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/sb-test.jsView on unpkg · L10Findings
3 High4 Medium4 Low
HighChild Processbin/sb-test.js
HighShellbin/sb-test.js
HighRuntime Package Installbin/sb-test.js
MediumDynamic Requirebin/sb-test.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings