Cmdrtm
Show system & bot stats
42
views
0
likes
31
installs
analysis โ static scan, nothing executed
0
grade C
Risky โ serious capabilities found, review before installing
Security
69
Privacy
100
Quality
100
Maintenance
90
Community
40
high
Shell access
2×
Spawns operating-system processes through child_process. A command running shell code can read or change anything the bot's account can.
L3
const { execSync } = require("child_process");L43
const df = execSync("df -k --total").toString().split("\n");
low
Dynamic require
require() is called with a value computed at runtime, so the loaded module cannot be known from reading the file.
L75
botVersion = require(process.cwd() + "/package.json").version || "unknown";capabilities โ what this file can do, regardless of intent
Network
Filesystem
Shell
Env vars
Dynamic code
Session data
Installs packages
Process control
dependencies
pidusage
checks
Exports a command/module
Handles errors (try/catch or .catch)
Readable, not minified
Has explanatory comments
No deprecated dependencies
Reasonable size (< 200 KB)
raw source โ loaded on demand
Loading sourceโฆ