strapi-content-sync-pro@1.0.8

No blocking static signals were detected.

Administrator updates media settings and calls the media test/sync endpoint.

Local command execution in the Strapi process context; remote-login can also create a persistent full-access token on the administrator-selected Strapi host.

Configured executable launched with child_process.spawn

No covert malware chain was found, but administrator-controlled executable selection creates a concrete local process-execution capability. Flag for warning rather than block because activation is explicit runtime configuration, not install-time or stealth behavior.