registry  /  weave-ai-cli  /  0.2.1

weave-ai-cli@0.2.1

Weave AI Agent CLI — cross-platform terminal AI chat for multi-agent project management

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 70 file(s), 768 KB of source, external domains: 127.0.0.1, api.anthropic.com, api.deepseek.com, api.github.com, api.openai.com, api.siliconflow.cn, example.com, schemas.openxmlformats.org, www.bing.com, your-claude-proxy.example.com, your-domain.com, your-proxy.example.com

Source & flagged code

4 flagged · loading source
bin/cli.jsView file
7const distPath = resolve(__dirname, '../dist/index.js'); L8: const { main } = await import(pathToFileURL(distPath).href); L9: main();
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7
dist/tools.jsView file
4import * as readline from 'node:readline'; L5: import { execSync } from 'node:child_process'; L6: import { C } from './utils.js'; ... L215: case 'web_search': return execWebSearch(call); L216: case 'web_fetch': return execWebFetch(call); L217: case 'list_agents': return execListAgents(call); ... L291: ? (path.isAbsolute(call.input.dir_path) ? call.input.dir_path : path.resolve(call.input.dir_path)) L292: : process.cwd(); L293: const filePattern = call.input.file_pattern; ... L464: catch (e) { L465: const errMsg = e.stderr || e.stdout || e.message; L466: return { tool_call_id: call.id, content: `Command failed:\n${errMsg}`.slice(0, 2000), is_error: true };
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/tools.jsView on unpkg · L4
weave.cmdView file
•path = weave.cmd kind = build_helper sizeBytes = 742 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

weave.cmdView on unpkg
dist/utils.jsView file
•matchType = previous_version_dangerous_delta matchedPackage = weave-ai-cli@0.0.2 matchedIdentity = npm:d2VhdmUtYWktY2xp:0.0.2 similarity = 0.351 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/utils.jsView on unpkg

Findings

2 High5 Medium4 Low
HighSandbox Evasion Gated Capabilitydist/tools.js
HighPrevious Version Dangerous Deltadist/utils.js
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperweave.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings