Loading npm security reports…
Point at any element in a running UI, say what should change, and an agent makes the change. Standalone npm package AND the in-Silt canvas tool. Spec: docs/silt-design-mode/ at the repo root.
Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references child process execution.
bin/silt-binary.mjsView on unpkg · L20Manifest entrypoint contains risky behavior absent from dist/build output.
bin/cli.mjsView on unpkg · L35A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.mjsView on unpkg · L35Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/skill-install.mjsView on unpkg · L63Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L20Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L20Package source references child process execution.
bin/silt-binary.mjsView on unpkg · L20Manifest entrypoint contains risky behavior absent from dist/build output.
bin/cli.mjsView on unpkg · L35A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.mjsView on unpkg · L35Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/skill-install.mjsView on unpkg · L63