registry / yy130202-tpx / 0.3.0

yy130202-tpx@0.3.0

Self-hosted CLI toolbox with secure reverse tunneling

AI Security Review

scanned 19h ago · by lpm-firewall-ai

No confirmed malicious install or import-time behavior. Explicit CLI commands can create tunnels, probe networks, capture packets, and apply network changes.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs tbx tunnel/net commands; system changes additionally require --apply --yes.

Impact

Dual-use capability can expose services or modify host networking when intentionally invoked.

Mechanism

User-directed network administration and tunneling

Rationale

Not malicious by source evidence, but it supplies substantial user-invoked dual-use networking and host-administration capabilities. Flag as a warning rather than a block.

Evidence

package.jsonbin/tbx.jssrc/cli.jssrc/net-cli.jssrc/system-actions.jssrc/packet-capture.js

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

User-invoked CLI provides reverse TCP/UDP/HTTP tunnels and network scanning.
src/system-actions.js can alter routes, firewall rules, and Windows network state.

yy130202-tpx@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code