Cmdevent
No description
0
views
0
likes
0
installs
analysis β static scan, nothing executed
0
grade B
Review recommended β some behaviour worth a look
Security
96
Privacy
80
Quality
86
Maintenance
82
Community
0
medium
Fetches from a paste site or link shortener
Content behind a paste/shortener link can be swapped out by its owner at any time.
L150
url = url.replace(regex, "https://pastebin.com/raw/$1");
low
Filesystem access
Reads or writes files on the machine running the bot.
L1
const fs = require("fs-extra");
low
Environment variable access
Reads process.env. Fine on its own; worth a look if the values are sent anywhere.
L97
(process.env.NODE_ENV == "development" ? true : !file.match(/(dev)\.js$/g)) &&
low
Network access
Makes HTTP/WebSocket requests. Check where the data goes.
L3
const axios = require("axios");capabilities β what this file can do, regardless of intent
Network
Filesystem
Shell
Env vars
Dynamic code
Session data
Installs packages
Process control
dependencies
axios, cheerio, fs-extra
checks
Exports a command/module
Handles errors (try/catch or .catch)
Readable, not minified
Has explanatory comments
No deprecated dependencies
Reasonable size (< 200 KB)
raw source β loaded on demand
Loading sourceβ¦