u1s1-cli@1.14.0
u1s1 — 有一说一,最省心的 AI 编程搭子。终端里用中文说需求,AI 帮你读文件、改代码、跑命令。
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe flagged login flow sends a generated public key and poll secret to the configured site, then receives device credentials after browser approval. The postinstall hook patches the bundled pi dependency, and inspected startup setup does not establish a malicious attack surface.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Package installation or an ordinary CLI launch.
Impact
The inspected behavior supports the package's CLI setup and authentication flow; no confirmed credential disclosure or harmful control-surface change was found.
Mechanism
The postinstall script applies interface patches to the bundled pi dependency; login uses browser-approved device credentials, and startup configures a local signing proxy.
AI rationale
The flagged login flow sends a generated public key and poll secret to the configured site, then receives device credentials after browser approval. The postinstall hook patches the bundled pi dependency, and inspected startup setup does not establish a malicious attack surface.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs a patch script that targets the bundled pi interface dependency.
- Login sends a generated public device key to the configured site and polls that same site for browser-approved credentials.
- The launcher uses a local signing proxy for API requests and removes credentials from child-process environments.
- Agent settings setup fills defaults while preserving existing user settings.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/patch-pi.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/render-regression.mjsView file
195function renderHotkeys() {
L196: const fn = new Function(...keyVars, `${hotkeysSrc}\nreturn [${titleExpr ?? '"Keyboard Shortcuts"'}, hotkeys, ${extHeader}].join("\\n");`);
L197: return fn(...keyVars.map((v) => `<${v}>`));
Low
Eval
Package source references a known benign dynamic code generation pattern.
scripts/render-regression.mjsView on unpkg · L195dist/update.jsView file
11import { readJsonResponseCapped, readResponseTextCapped } from "./api.js";
L12: const require = createRequire(import.meta.url);
L13: const pkg = require("../package.json");
Findings
5 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighCredential Redirect Persistencedist/index.js
HighSemantic Analysis Limiteddist/agent-setup.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/secret-env.js
HighPrevious Version Dangerous Deltadist/index.js
MediumDynamic Requiredist/update.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalscripts/render-regression.mjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to u1s1-cli@1.14.0.
See all versions of u1s1-cli for other recorded verdicts.
- Review the evidence and your use of u1s1-cli@1.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.