registry / terminal-smart-cli / 0.97.8
terminal-smart-cli@0.97.8
Terminal Smart no seu terminal — pergunte, analise logs por pipe e orquestre agentes de IA. Comando: ts
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggedbin/ts.jsView file
13if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
L15: }
High
11L12: // Windows legado (cmd.exe): força UTF-8 pro desenho das caixas não virar "?".
L13: if (process.platform === 'win32' && process.stdout.isTTY) {
High
122function privacyCmd() {
L123: const privacyUrl = 'https://terminalsmart.com.br/privacidade';
L124: console.log((cfg.lang === 'en' ? 'Privacy Policy: ' : 'Política de Privacidade: ') + privacyUrl);
...
L132: console.log((cfg.lang === 'en' ? 'Account, data export and deletion: ' : 'Conta, exportação de dados e exclusão: ') + accountUrl);
L133: if (process.env.TS_NO_BROWSER !== '1') try {
L134: const { exec } = require('child_process');
L135: const cmd = process.platform === 'win32' ? `start "" "${accountUrl}"` : process.platform === 'darwin' ? `open "${accountUrl}"` : `xdg-open "${accountUrl}"`;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
7 High4 Medium6 Low
HighChild Processbin/ts.js
HighShellbin/ts.js
HighSame File Env Network Executionbin/ts.js
HighSandbox Evasion Gated Capabilitybin/ts.js
HighRemote Agent Bridgelib/meta.js
HighTrigger Reachable Persistencebin/ts.js
HighPrevious Version Dangerous Deltabin/ts.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/ts.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptobin/ts.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to terminal-smart-cli@0.97.8.
See all versions of terminal-smart-cli for other recorded verdicts.
- Review the evidence and your use of terminal-smart-cli@0.97.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.