u1s1-cli@1.0.0

u1s1 — 有一说一,最省心的 AI 编程搭子。终端里用中文说需求,AI 帮你读文件、改代码、跑命令。

AI Security Review

scanned 24d ago · by lpm-firewall-ai

Static inspection found a narrow dependency UI patch and package-aligned update/configuration behavior, but no concrete malicious behavior. The package does not runtime-depend on itself or mutate a foreign broad AI-agent control surface.

Static reason

One or more suspicious static signals were detected.

Trigger

Installation runs the declared postinstall hook; invoking the CLI can check for updates or configure its own agent settings.

Impact

No credential harvesting, unrelated exfiltration, remote payload execution, broad agent-control mutation, or destructive behavior was established.

Mechanism

The hook replaces known UI strings in one Pi component. The updater queries this package's npm registry endpoint, while shell setup writes a shell path to package-owned settings.

AI rationale

Network endpoints1

registry.npmjs.org/u1s1-cli/latest

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package declares one postinstall hook and no self-dependency.
The postinstall code targets a specific bundled Pi interactive UI component and is idempotent.
Shell configuration is written only to the package-owned agent settings location.
Update checks use the npm registry for this package and can be disabled through settings.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 32 file(s), 283 KB of source, external domains: 127.0.0.1, api.u1s1.io, registry.npmjs.org, u1s1.io, www.w3.org

Source & flagged code

9 flagged

package.jsonView file

Lines 10-50json

10 "./embed": {

11 "types": "./dist/embed.d.ts",

12 "default": "./dist/embed.js"

13 },

14 "./package.json": "./package.json"

15 },

16 "files": [

17 "dist",

18 "bench",

19 "scripts"

20 ],

21 "engines": {

22 "node": ">=22.19.0"

23 },

24 "scripts": {

25 "build": "tsc",

26 "dev": "tsx src/index.ts",

27 "typecheck": "tsc --noEmit",

28 "prepublishOnly": "npm run build && npm test",

29 "test": "tsx --test test/*.test.ts && node scripts/render-regression.mjs",

30 "postinstall": "node scripts/patch-pi.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

31 "package": "bash ../../scripts/package.sh",

32 "upload-release": "bash ../../scripts/upload-release.sh",

33 "release": "npm run package && npm run upload-release"

34 },

35 "keywords": [

36 "ai",

37 "cli",

38 "coding-agent",

39 "deepseek",

40 "u1s1"

41 ],

42 "license": "MIT",

43 "homepage": "https://u1s1.io",

44 "dependencies": {

45 "@earendil-works/pi-coding-agent": "0.84.3",

46 "@earendil-works/pi-tui": "0.84.3",

47 "typebox": "1.3.7"

48 },

49 "devDependencies": {

50 "@types/node": "^22.20.1",

dist/shell-doctor.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/shell-doctor.jsView on unpkg · L1

3import { dirname, join } from "node:path";

4import

dist/update.jsView file

Lines 1-27javascript

1import { execSync, spawnSync } from "node:child_process";

2import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";

3import { createRequire } from "node:module";

4import { tmpdir } from "node:os";

dist/workflow/runner.jsView file

Lines 1-21javascript

1import { createHash } from "node:crypto";

2import { execFileSync } from "node:child_process";

3import { appendFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/workflow/runner.jsView on unpkg · L1

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/shell-doctor.jsView file

1import { spawn } from "node:child_process"; L2: import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/shell-doctor.jsView on unpkg · L1

dist/update.jsView file

61* - Windows:正在运行的 node.exe 锁着自己,同进程装不了 —— 弹一个新的 L62: * PowerShell 窗口跑 install.ps1(脚本会先结束安装目录里残留的 node 进程, L63: * 包括本进程,属预期),本进程立刻退出把文件锁让出来。

High

Shell

Findings

5 High5 Medium7 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/shell-doctor.js

HighShelldist/update.js

HighSandbox Evasion Gated Capabilitydist/update.js

HighRuntime Package Installdist/update.js

MediumDynamic Requiredist/update.js

MediumUnsafe Vm Contextdist/workflow/runner.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/workflow/runner.js

LowWeak Cryptodist/workflow/runner.js

Affected versions and remediation

This report applies to u1s1-cli@1.0.0.

See all versions of u1s1-cli for other recorded verdicts.

Review the evidence and your use of u1s1-cli@1.0.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-29 08:51:00.911Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.