u1s1-cli@1.2.9

⚠ Under review

u1s1 — 有一说一,最省心的 AI 编程搭子。终端里用中文说需求,AI 帮你读文件、改代码、跑命令。

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 306 KB of source, external domains: 127.0.0.1, api.u1s1.io, registry.npmjs.org, u1s1.io, www.w3.org

Source & flagged code

10 flagged

package.jsonView file

Lines 10-50json

10 "./embed": {

11 "types": "./dist/embed.d.ts",

12 "default": "./dist/embed.js"

13 },

14 "./package.json": "./package.json"

15 },

16 "files": [

17 "dist",

18 "bench",

19 "scripts"

20 ],

21 "engines": {

22 "node": ">=22.19.0"

23 },

24 "scripts": {

25 "build": "tsc",

26 "dev": "tsx src/index.ts",

27 "typecheck": "tsc --noEmit",

28 "prepublishOnly": "npm run build && npm test",

29 "test": "tsx --test test/*.test.ts && node scripts/render-regression.mjs",

30 "postinstall": "node scripts/patch-pi.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L30

31 "package": "bash ../../scripts/package.sh",

32 "upload-release": "bash ../../scripts/upload-release.sh",

33 "release": "npm run package && npm run upload-release"

34 },

35 "keywords": [

36 "ai",

37 "cli",

38 "coding-agent",

39 "deepseek",

40 "u1s1"

41 ],

42 "license": "MIT",

43 "homepage": "https://u1s1.io",

44 "dependencies": {

45 "@earendil-works/pi-coding-agent": "0.84.4",

46 "@earendil-works/pi-tui": "0.84.4",

47 "typebox": "1.3.7"

48 },

49 "devDependencies": {

50 "@types/node": "^22.20.1",

dist/shell-doctor.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/shell-doctor.jsView on unpkg · L1

3import { join, win32 } from "node:path";

4import

dist/update.jsView file

Lines 1-27javascript

1import { execSync, spawnSync } from "node:child_process";

2import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";

3import { createRequire } from "node:module";

4import { tmpdir } from "node:os";

dist/workflow/runner.jsView file

Lines 1-21javascript

1import { createHash } from "node:crypto";

2import { execFileSync } from "node:child_process";

3import { appendFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/workflow/runner.jsView on unpkg · L1

dist/index.jsView file

Lines 77-117javascript

77/**

78 * TUI 退出后前台安装新版:此刻不再有模型调用和懒加载,重铺 node_modules 才安全。

79 * 不设 timeout——半路杀掉 npm 会留下残缺的全局安装,之后连启动都起不来;

80 * stdio 直通,装多久用户看得见。(同机另开的 u1s1 实例仍会被重铺波及,属残余

81 * 风险,但远好于更新自己脚下这棵树。)

82 */

83function installPendingUpdate() {

84 if (!pendingUpdate)

dist/agent-setup.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/agent-setup.js#virtual:normalized:round1View on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/shell-doctor.jsView file

1import { spawn } from "node:child_process"; L2: import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/shell-doctor.jsView on unpkg · L1

142console.error(" ⚠ 未找到 Git Bash,将使用 WSL 的 bash:命令会在 WSL 的 Linux 里执行,不是 Windows 本机。"); L143: console.error(" 建议安装 Git for Windows(PowerShell 运行: winget install --id Git.Git)后重启 u1s1。"); L144: }

High

Shell

Package source references shell execution.

dist/shell-doctor.jsView on unpkg · L142

Findings

7 High5 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/shell-doctor.js

HighShelldist/shell-doctor.js

HighSame File Env Network Executiondist/index.js

HighSandbox Evasion Gated Capabilitydist/update.js

HighRuntime Package Installdist/update.js

HighSemantic Analysis Limiteddist/agent-setup.js#virtual:normalized:round1

MediumDynamic Requiredist/update.js

MediumUnsafe Vm Contextdist/workflow/runner.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

Affected versions and remediation

This report applies to u1s1-cli@1.2.9.

See all versions of u1s1-cli for other recorded verdicts.

Review the evidence and your use of u1s1-cli@1.2.9 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-16 02:29:28.451Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.