registry / startx / 1.1.5

startx@1.1.5

AI Security Review

scanned 6h ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. Risky primitives are tied to explicit scaffolding or AI tool commands rather than install-time execution, stealth persistence, or exfiltration.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User explicitly runs startx CLI commands or invokes packaged AI/database/weather tools.

Impact

Creates or updates project scaffold files and may run package-manager install after prompt; no hidden malicious impact found.

Mechanism

user-invoked scaffolding and sandboxed/template code evaluation

Rationale

Static inspection shows a monorepo scaffolding CLI plus AI/tooling modules with explicit user-invoked file writes and evaluation features, but no lifecycle hook, import-time payload, credential theft, stealth persistence, or hidden exfiltration. The scanner findings map to package-aligned behavior and bundled/minified dependencies rather than a concrete malicious chain.

Evidence

package.jsonapps/startx-cli/src/index.tsapps/startx-cli/src/commands/init.tsapps/startx-cli/src/commands/package.tsapps/cli/src/commands/common/hashing.tspackages/aix/src/lib/convertor/variable-resolver.tspackages/aix/src/tools/system/index.tsuser-selected workspace package.jsonuser-selected pnpm-workspace.yamluser-selected .vscode/settings.jsonuser-selected .vscode/extensions.jsonuser-selected package/app source files

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

apps/startx-cli/src/commands/package.ts can write scaffold files and optionally spawn package-manager install, but only after explicit CLI commands/prompts.
packages/aix/src/tools/system/index.ts exposes VM-backed JavaScript helper tools as user-invoked AI framework functionality.
packages/aix/src/lib/convertor/variable-resolver.ts evaluates stored fn variables/expressions in QuickJS for template interpolation.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks; only bin startx points to apps/startx-cli/dist/index.mjs.
apps/startx-cli/src/index.ts only registers commander commands ping/init/package and does not perform import-time mutation or network activity.
apps/startx-cli/src/commands/init.ts and package.ts implement project scaffolding into user-selected workspaces with overwrite prompts.
No credential harvesting or exfiltration path found in inspected CLI entrypoints or hot files.
Network use found is package-aligned app/tool code, not install-time or hidden exfiltration.
Scanner secret hit in apps/cli/src/commands/common/hashing.ts is a user-supplied password hashing command, not embedded secret material.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 263 file(s), 1.21 MB of source, external domains: api.anthropic.com, api.cerebras.ai, api.groq.com, api.open-meteo.com, app.com, dotenvx.com, fonts.googleapis.com, fonts.gstatic.com, geocoding-api.open-meteo.com, github.com, json-schema.org

Source & flagged code

6 flagged

apps/cli/src/commands/common/hashing.tsView file

Lines 7-35typescript

7 command = new Command("hash")

8 .argument("<password>", "String to hash")

9 .description("Hash a string")

10 .action(this.run.bind(this));

12 async run(password: string) {

13 const hash = await HashingModule.hash(password);

15 logger.info(`Hash for "${password}": ${hash}`);

16 }

17}

19export class HashingCompareCommand extends ICommand {

20 command = new Command("hash:compare")

21 .argument("<password>", "Original string")

22 .argument("<hash>", "Hash to compare")

23 .description("Compare a string against a hash")

24 .action(this.run.bind(this));

26 async run(password: string, hash: string) {

27 logger.info(`Comparing password: "${password}" against hash: "${hash}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

apps/cli/src/commands/common/hashing.tsView on unpkg · L27

29 const compare = await HashingModule.compare(password, hash);

31 logger.info(`Hash for "${password}": ${compare ? "Valid" : "Invalid"}`);

32 }

33}

34export const HashingCommands = [new HashingCommand(), new HashingCompareCommand()];

packages/aix/src/lib/convertor/variable-resolver.tsView file

Lines 109-149typescript

109 data: string;

110 access: "user" | "agent" | "system" | "message";

111 }>;

112 }) {

113 const messageVars = messages.

apps/startx-cli/dist/index.mjsView file

177contains invisible/control Unicode U+FEFF (zero width no-break space) `};delete e.items,Object.assign(e,{type:n,source:t,end:[r]});break}default:{let r=`indent`in e?e.indent:-1,i=`end`in e&&Array.isArray(e.end)?e.end.filter(e=>e.type===`space`||e.type===`comment`||e.type===`newline`):[];for(let t of Object.ke

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/startx-cli/dist/index.mjsView on unpkg · L177

•Trigger-reachable chain: manifest.bin -> apps/startx-cli/dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

apps/startx-cli/dist/index.mjsView on unpkg

61`)[0]}\n`),Error.captureStackTrace(this,e)}};t.exports=e=>{if(e.length>2)throw new n(e);function t(e={}){this.options=e}t.prototype.transform=e;function r(e){return new t(e)}return... L62: `)!=-1,a=this._styles,s=a.length;s--;){var c=i[a[s]];e=c.open+e.replace(c.closeRe,c.open)+c.close,t&&(e=e.replace(o,function(e){return c.close+e+c.open}))}return e}n.setTheme=funct... L63: `));return!0}t.exports=(...e)=>{let t=n(r(e)),i=t();return i.Format=t.Format,i},t.exports.cascade=r})),vg=v(((e,t)=>{let{hasOwnProperty:n}=Object.prototype,r=_();r.configure=_,r.st...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

packages/aix/src/tools/system/index.tsView file

Lines 213-253typescript

213 .describe(

214 "Set to true if this operation fully resolves the user's request (script must return formatted Markdown). Set to false if extracting intermediate data."

215 ),

216 }),

217 run: async ({ isCompleted, operation }, internal) => {

218 try {

219 const

Source & flagged code

6 flagged · loading source

apps/cli/src/commands/common/hashing.tsView file

27patternName = generic_password severity = medium line = 27 matchedText = logger.i..."`);

Medium

Secret Pattern

Package contains a possible secret pattern.

apps/cli/src/commands/common/hashing.tsView on unpkg · L27

packages/aix/src/lib/convertor/variable-resolver.tsView file

129if (v.type === "fn") { L130: parsed = eval(`(function() { L131: return (function() {

Low

Eval

Package source references a known benign dynamic code generation pattern.

packages/aix/src/lib/convertor/variable-resolver.tsView on unpkg · L129

apps/startx-cli/dist/index.mjsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/startx-cli/dist/index.mjsView on unpkg · L177

•Trigger-reachable chain: manifest.bin -> apps/startx-cli/dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

apps/startx-cli/dist/index.mjsView on unpkg

Medium

Dynamic Require

Package source references dynamic require/import behavior.

apps/startx-cli/dist/index.mjsView on unpkg · L61

packages/aix/src/tools/system/index.tsView file

233try { L234: contextValue = JSON.parse(contextValue); L235: } catch {

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

packages/aix/src/tools/system/index.tsView on unpkg · L233

Findings

2 Critical7 Medium5 Low

CriticalTrojan Source Unicodeapps/startx-cli/dist/index.mjs

CriticalTrigger Reachable Dangerous Capabilityapps/startx-cli/dist/index.mjs

MediumSecret Patternapps/cli/src/commands/common/hashing.ts

MediumDynamic Requireapps/startx-cli/dist/index.mjs

MediumUnsafe Vm Contextpackages/aix/src/tools/system/index.ts

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalpackages/aix/src/lib/convertor/variable-resolver.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

apps/cli/src/commands/common/hashing.tsView file

Lines 7-35typescript

7 command = new Command("hash")

8 .argument("<password>", "String to hash")

9 .description("Hash a string")

10 .action(this.run.bind(this));

12 async run(password: string) {

13 const hash = await HashingModule.hash(password);

15 logger.info(`Hash for "${password}": ${hash}`);

16 }

17}

19export class HashingCompareCommand extends ICommand {

20 command = new Command("hash:compare")

21 .argument("<password>", "Original string")

22 .argument("<hash>", "Hash to compare")

23 .description("Compare a string against a hash")

24 .action(this.run.bind(this));

26 async run(password: string, hash: string) {

27 logger.info(`Comparing password: "${password}" against hash: "${hash}"`);

Medium

Secret Pattern

Package contains a possible secret pattern.

apps/cli/src/commands/common/hashing.tsView on unpkg · L27

29 const compare = await HashingModule.compare(password, hash);

31 logger.info(`Hash for "${password}": ${compare ? "Valid" : "Invalid"}`);

32 }

33}

34export const HashingCommands = [new HashingCommand(), new HashingCompareCommand()];

packages/aix/src/lib/convertor/variable-resolver.tsView file

Lines 109-149typescript

109 data: string;

110 access: "user" | "agent" | "system" | "message";

111 }>;

112 }) {

113 const messageVars = messages.

apps/startx-cli/dist/index.mjsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/startx-cli/dist/index.mjsView on unpkg · L177

•Trigger-reachable chain: manifest.bin -> apps/startx-cli/dist/index.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

apps/startx-cli/dist/index.mjsView on unpkg

Medium

Dynamic Require

Package source references dynamic require/import behavior.

packages/aix/src/tools/system/index.tsView file

Lines 213-253typescript

213 .describe(

214 "Set to true if this operation fully resolves the user's request (script must return formatted Markdown). Set to false if extracting intermediate data."

215 ),

216 }),

217 run: async ({ isCompleted, operation }, internal) => {

218 try {

219 const