registry / yuan-asset-cli / 0.1.0

yuan-asset-cli@0.1.0

固定资产管理命令行工具，支持资产新增、查询、调拨、借用、派发等操作，对 AI Agents 友好。

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package is a CLI for asset-management API calls against a user-supplied server, with local configuration handling for login/profile settings.

Static reason

One or more suspicious static signals were detected.

Trigger

User invokes yuan-asset CLI commands such as login, asset, consumable, base, or config.

Impact

Sends user-provided credentials and command payloads to the configured asset-management server; no hidden exfiltration or install-time mutation found.

Mechanism

User-directed API client and local CLI configuration

Rationale

Static inspection shows suspicious primitives are aligned with the advertised CLI: environment credentials, fetch requests to a configured server, and config persistence for login/profile commands. The scanner's child_process signal is from bundled commander internals rather than a concrete malicious execution path.

Evidence

package.jsonbin/yuan-asset.jsdist/index.jsREADME.md

Network endpoints2

<user-supplied server>/auth/login/open_token<user-supplied server>/open/*

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks.
bin/yuan-asset.js only imports ../dist/index.js as the CLI entrypoint.
dist/index.js network calls use user-configured server URL plus package API paths such as /auth/login/open_token and /open/* asset endpoints.
Credential env vars YUAN_ASSET_URL/YUAN_ASSET_APP_KEY/YUAN_ASSET_APP_SECRET are used for explicit login/config behavior documented in README.md.
child_process references are from bundled commander subcommand support, with no package-defined executable subcommands found.
No evidence of credential harvesting, hardcoded exfiltration endpoint, install-time execution, persistence, destructive behavior, or AI-agent control-surface writes.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinified

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 113 KB of source

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-32javascript

1import{createRequire as T2}from"node:module";var X2=Object.create;var{getPrototypeOf:Z2,defineProperty:A_,getOwnPropertyNames:z2}=Object;var B2=Object.prototype.hasOwnProperty;function G2(_){return this[_]}var H2,U2,C_=(_,R,M)=>{var X=_!=null&&typeof _==="object";if(X){var Z=R?H2??=new WeakMap:U2??=new WeakMap,z=Z.get(_);if(z)return z}M=_!=null?X2(Z2(_)):{};let B=R||!_||!_.__esModule?A_(M,"default",{value:_,enumerable:!0}):M;for(let G of z2(_))if(!B2.call(B,G))A_(B,G,{get:G2.bind(_,G),enumerable:!0});if(X)Z.set(_,B);return B};var a=(_,R)=>()=>(R||_((R={exports:{}}).exports,R),R.exports);var r= ...

2`)}displayWidth(_){return x_(_).length}styleTitle(_){return _}styleUsage(_){return _.split(" ").map((R)=>{if(R==="[options]")return this.styleOptionText(R);if(R==="[command]")return this.styleSubcommandText(R);if(R[0]==="["||R[0]==="<")return this.styleArgumentText(R);return this.styleCommandText(R)}).join(" ")}styleCommandDescription(_){return this.styleDescriptionText(_)}styleOptionDescription(_){return this.styleDescriptionText(_)}styleSubcommandDescription(_){return this.styleDescriptionText(_)}styleArgumentDescription(_){return this.styleDescriptionText(_)}styleDescriptionText(_){return _ ...

3`+" ".repeat(R+G));return z+B+" ".repeat(G)+H.replace(/\n/g,`

4${z}`)}boxWrap(_,R){if(R<this.minWidthToWrap)return _;let M=_.split(/\r\n|\n/),X=/[\s]*[^\s]+/g,Z=[];return M.forEach((z)=>

5`)}}function x_(_){let R=/\x1b\[\d*(;\d*)*m/g;return _.replace(R,"")}$2.Help=O_;$2.stripColor=x_});var e0=a((E2)=>{var{InvalidArgumentError:q2}=

6- a short flag is a single dash and a single character

7 - either use a single dash and a single character (for a short flag)

8 - or use a double dash for a long option (and can have two, like '--ws, --workspace')`);if(X.test(B))throw Error(`${G}

9- too many short flags`);if(Z.test(B))throw Error(`${G}

10- too many long flags`);throw Error(`${G}

11- unrecognised flag format`)}if(R===void 0&&M===void 0)throw Error(`option creation failed due to no flags found in '${_}'.`);return{shortFlag:R,longFlag:M}}E2.Option=y_;E2.DualOptions=v_});var h_=a((j2)=>{function C2(_,R){if(Math.abs(_.length-R.length)>3)return Math.max(_.length,R.length);let M=[];for(let X=0;X<=_.length;X++)M[X]=[X];for(let X=0;X<=R.length;X++)M[0][X]=X;for(let X=1;X<=R.length;X++)for(let Z=1;Z<=_.length;Z++){let z=1;if(_[Z-1]===R[X-1])z=0;else z=1;if(M[Z][X]=Math.min(M[Z-1][X]+1,M[Z][X-1]+1,M[Z-1][X-1]+z),Z>1&&X>1&&_[Z-1]===R[X-2]&&_[Z-2]===R[X-1])M[Z][X]=Math.min(M[Z][X],M ...

12(Did you mean one of ${X.join(", ")}?)`;if(X.length===1)return`

13(Did you mean ${X[0]}?)`;return""}j2.suggestSimilar=P2});var c_=a((f2)=>{var x2=r("node:events").EventEmitter,o0=r("node:child_process"),X0=r("node:path"),P0=r("node:fs"),D=r("node:process"

14- specify the name in Command constructor or using .name()`);if(R=R||{},R.isDefault)this._defaultCommandName=_._name;if(R.noHelp||R.hidden)_._hidden=!0;return this._registerCommand(_),_.parent=this,_._checkForBrokenPassThrough(),this}createArgument(_,R){return new k2(_,R)}argument(_,R,M,X){let Z=this.createArgument(_,R);if(typeof M==="function")Z.default(X).argParser(M);else Z.default(M);return this.addArgument(Z),this}arguments(_){return _.trim().split(/ +/).forEach((R)=>{this.argument(R)}),this}addArgument(_){let R=this.registeredArguments.slice(-1)[0];if(R&&R.variadic)throw Error(`only the ...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L12

15Expecting one of '${M.join("', '")}'`);if(this._lifeCycleHooks[_])this._lifeCycleHooks[_].push(R);else this._lifeCycleHooks[_]=[R];return this}exitOverride(_){if(_)this._exitCallback=_;else this._exitCallback=(R)=>{if(R.code!=="commander.executeSubCommandAsync")throw R};return this}_exit(_,R,M){if(this._exitCallback)this._exitCallback(new __(_,R,M));D.exit(_)}action(_){let R=(M)=>{let X=this.registeredArguments.length,Z=M.slice(0,X);if(this._storeOptionsAsProperties)Z[X]=this;else Z[X]=this.opts();return Z.push(this),_.apply(this,Z)};return this._actionHandler=R,this}createOption(_,R){return n ...

16- already used by option '${R.flags}'`)}this.options.push(_)}_registerCommand(_){let R=(X)=>{return[X.name()].concat(X.aliases())},M=R(_).find((X)=>this._findCommand(X));if(M

17- either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValues={...this._savedState._optionValues},this._optionValueSources={...this._savedState._optionValueSources},this.args=[],this.processedArgs=[]}_checkForMissingExecutable(_,R,M){if(P0.existsSync(_))return;let X=R?`searched for local subcommand relative to directory '${R}'`:"no directory for search for local subcommand, use .executableDir() to supply a custom directory",Z=`'${_}' does not exist

18 - if '${M}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead

19 - if the default executable name is not suitable, use the executableFile option to supply a custom name or path

20 - ${X}`;throw Error(Z)}_executeSubCommand(_,R){R=R.slice();let M=!1,X=[".js",".ts",".tsx",".mjs",".cjs"];function Z(T,H){let J=X0.resolve(T,H);if(P0.existsSync(J))return J;if(X.includes(X0.extname(H)))return;let I=X.find((Y)=>P0.existsSync(`${J}${Y}`));if(I)return`${J}${I}`;return}this._checkForMissingMandatoryOptions(),this._checkForConflictingOptions();let z=_._executableFile||`${this._name}-${_._name}`,B=this._executableDir||"";if(this._scriptPath){let T;try{T=P0.realpathSync(this._scriptPath)}catch{T=this._scriptPath}B=X0.resolve(X0.dirname(T),B)}if(B){let T=Z(B,z);if(!T&&!_._executableFi ...

21`,this._outputConfiguration.writeErr),typeof this._showHelpAfterError==="string")this._outputConfiguration.writeErr(`${this._showHelpAfterError}

22`);else if(this._showHelpAfterError)this._outputConfiguration.writeErr(`

23`),this.outputHelp({error:!0});let M=R||{},X=M.exitCode||1,Z=M.code||"commander.error";this._exit(X,Z,_)}_parseOptionsEnv(){this.options.forEach((_)=>{if(_.envVar&&

24`),this._exit(0,"commander.version",_)}),this}description(_,R){if(_===void 0&&R===void 0)return this._description;if(this._description=_,R)this._argsDescription=R;return this}summary(_){if(_===void 0)return this._summary;return this._summary=_,this}alias(_){if(_===void 0)return this._aliases[0];let R=this;if(this.commands.length!==0&&this.commands[this.commands.length-1]._executableHandler)R=this.commands[this.commands.length-1];if(_===R._name)throw Error("Command alias can't be the same as its name");let M=this.parent?._findCommand(_);if(M){let X=[M.name()].concat(M.aliases()).join("|");throw ...

25Expecting one of '${M.join("', '")}'`);let X=`${_}Help`;return this.on(X,(Z)=>{let z;if(typeof R==="function")z=R({error:Z.error,command:Z.command});else z=R;

26`)}),this}_outputHelpIfRequested(_){let R=this._getHelpOption();if(R&&_.find((X)=>R.is(X)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function u_(_){return

27GFS4: `),console.error(_)};if(!O[m]){if(Z_=global[m]||[],BM(O,Z_),O.close=function(_){function R(M,X){return _.call(O,M,function(Z){

28${AR}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L12

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L12

29`;throw _}class m0{constructor(_,R,M={}){if(this._path=M.configPath??FR(_,M.globalConfigPath),this._clearInvalidConfig=M.clearInvalidConfig??!0,R)this.all={...R,...this.all}}get all(){try{return JSON.parse(q0.default.readFileSync(this._path,"utf8"))}catch(_){if(_.code==="ENOENT")return{};if(_.name==="SyntaxError"){if(this._clearInvalidConfig)return u0(this._path,"",jM),{};throw _}return OM(_),{}}}set all(_){try{q0.default.mkdirSync(K0.dirname(this._path),CR),u0(this._path,JSON.stringify(_,void 0,"\t"),jM)}catch(R){OM(R)}}get size(){return Object.keys(this.all||{}).length}get(_){return AM(this. ...

30`);return`${Z}

31${z}

32${B}`}function K_(_,R){return(R??Object.keys(_)).map((X)=>{let Z=gM(_,X);return`* ${X}: ${mM(Z)}`}).join(`

Long lines were clipped for display.

Source & flagged code

3 flagged · loading source

dist/index.jsView file

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L12

12(Did you mean one of ${X.join(", ")}?)`;if(X.length===1)return` L13: (Did you mean ${X[0]}?)`;return""}j2.suggestSimilar=P2});var c_=a((f2)=>{var x2=r("node:events").EventEmitter,o0=r("node:child_process"),X0=r("node:path"),P0=r("node:fs"),D=r("node... L14: - specify the name in Command constructor or using .name()`);if(R=R||{},R.isDefault)this._defaultCommandName=_._name;if(R.noHelp||R.hidden)_._hidden=!0;return this._registerCommand... ... L25: Expecting one of '${M.join("', '")}'`);let X=`${_}Help`;return this.on(X,(Z)=>{let z;if(typeof R==="function")z=R({error:Z.error,command:Z.command});else z=R;if(z)Z.write(`${z} L26: `)}),this}_outputHelpIfRequested(_){let R=this._getHelpOption();if(R&&_.find((X)=>R.is(X)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function u_(_){... L27: GFS4: `),console.error(_)};if(!O[m]){if(Z_=global[m]||[],BM(O,Z_),O.close=function(_){function R(M,X){return _.call(O,M,function(Z){if(!Z)zM();if(typeof X==="function")X.apply(this... L28: ${AR}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L12

12(Did you mean one of ${X.join(", ")}?)`;if(X.length===1)return` L13: (Did you mean ${X[0]}?)`;return""}j2.suggestSimilar=P2});var c_=a((f2)=>{var x2=r("node:events").EventEmitter,o0=r("node:child_process"),X0=r("node:path"),P0=r("node:fs"),D=r("node... L14: - specify the name in Command constructor or using .name()`);if(R=R||{},R.isDefault)this._defaultCommandName=_._name;if(R.noHelp||R.hidden)_._hidden=!0;return this._registerCommand... ... L26: `)}),this}_outputHelpIfRequested(_){let R=this._getHelpOption();if(R&&_.find((X)=>R.is(X)))this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)")}}function u_(_){... L27: GFS4: `),console.error(_)};if(!O[m]){if(Z_=global[m]||[],BM(O,Z_),O.close=function(_){function R(M,X){return _.call(O,M,function(Z){if(!Z)zM();if(typeof X==="function")X.apply(this... L28: ${AR}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L12

Findings

3 High2 Medium3 Low

HighChild Processdist/index.js

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings