Cmduptime
Video uptime with system monitor + sound
0
views
0
likes
0
installs
Aliases: system, stm
analysis — static scan, nothing executed
0
grade B
Review recommended — some behaviour worth a look
Security
78
Privacy
86
Quality
100
Maintenance
100
Community
0
medium
Deletes files
4×
Calls fs.rm / unlink / rmdir. Check what path it deletes and whether a user can influence it.
L89
fs.unlinkSync(destPath);L107
try { fs.unlinkSync(BG_VIDEO_PATH); } catch (e) {}L496
if (overlayPath && fs.existsSync(overlayPath)) fs.unlinkSync(overlayPath);L497
if (outPath && fs.existsSync(outPath)) fs.unlinkSync(outPath);
low
Hard-coded IP address
3×
Talks to a raw IP address instead of a named host — harder to audit and easy to redirect.
L45
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"L56
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"L76
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
low
Filesystem access
Reads or writes files on the machine running the bot.
L4
const fs = require("fs");
low
Environment variable access
Reads process.env. Fine on its own; worth a look if the values are sent anywhere.
L150
const env = process.env;
low
Network access
Makes HTTP/WebSocket requests. Check where the data goes.
L6
const axios = require("axios");capabilities — what this file can do, regardless of intent
Network
Filesystem
Shell
Env vars
Dynamic code
Session data
Installs packages
Process control
dependencies
axios, canvas, check-disk-space, ffmpeg-static, ffprobe-static, fluent-ffmpeg
checks
Exports a command/module
Handles errors (try/catch or .catch)
Readable, not minified
Has explanatory comments
No deprecated dependencies
Reasonable size (< 200 KB)
raw source — loaded on demand
Loading source…