registry  /  ucin-code  /  0.4.0

ucin-code@0.4.0

UCIN Code — a private, model-agnostic agentic coding CLI.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 3.05 MB of source, external domains: ai-gateway.vercel.sh, ai-sdk.dev, api.ucin.in, api.vercel.com, app.ucin.in, example.com, html.duckduckgo.com, json-schema.org, llm.ucin.in, opencode.ai, raw.githubusercontent.com, registry.npmjs.org, ucin.in, vercel.com

Source & flagged code

6 flagged · loading source
dist/bench.mjsView file
32197import * as path4 from "node:path"; L32198: import { execSync, execFileSync } from "node:child_process"; L32199: function hasRg() {
High
Child Process

Package source references child process execution.

dist/bench.mjsView on unpkg · L32197
43054parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`]; L43055: parsed.command = process.env.comspec || "cmd.exe"; L43056: parsed.options.windowsVerbatimArguments = true;
High
Shell

Package source references shell execution.

dist/bench.mjsView on unpkg · L43054
18747} L18748: const content = fs.readFileSync(authPath, "utf8"); L18749: if (!content) { ... L19439: } L19440: function toGatewayRealtimeUrl(baseURL, modelId) { L19441: const url2 = new URL(`${baseURL.replace(/^http/, "ws")}/realtime-model`); ... L29459: availableTools = undefined, L29460: message = `Model tried to call unavailable tool '${toolName}'. ${availableTools === undefined ? "No tools are available." : `Available tools: ${availableTools.join(", ")}.`}` L29461: }) { ... L32197: import * as path4 from "node:path"; L32198: import { execSync, execFileSync } from "node:child_process"; L32199: function hasRg() {
High
Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bench.mjsView on unpkg · L18747
38361sourceCode = this.opts.code.process(sourceCode, sch); L38362: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L38363: const validate = makeValidate(this, this.scope.get());
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/bench.mjsView on unpkg · L38361
dist/cli.mjsView file
46118// src/platform.ts L46119: import { execFile } from "node:child_process"; L46120: var API_BASE = process.env.UCIN_API_BASE ?? "https://api.ucin.in"; L46121: async function getJSON(path13) {
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.mjsView on unpkg · L46118
160data, L161: message = `Invalid response data: ${JSON.stringify(data)}.` L162: }) { ... L1166: bigint: () => bigint, L1167: base64url: () => base64url, L1168: base64: () => base64, ... L2313: try { L2314: new URL(`http://[${payload.value}]`); L2315: } catch { ... L16037: const ipv63 = hostname2.slice(1, -1); L16038: if (isPrivateIPv6(ipv63)) { L16039: throw new DownloadError({
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.mjsView on unpkg · L160

Findings

5 High3 Medium6 Low
HighChild Processdist/bench.mjs
HighShelldist/bench.mjs
HighSame File Env Network Executiondist/cli.mjs
HighSandbox Evasion Gated Capabilitydist/cli.mjs
HighRemote Agent Bridgedist/bench.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/bench.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings