rtm
Show system & bot stats
2
views
0
likes
2
installs
analysis — static scan, nothing executed
0
grade C
Risky — serious capabilities found, review before installing
Security
69
Privacy
100
Quality
100
Maintenance
100
Community
12
high
Shell access
2×
Spawns operating-system processes through child_process. A command running shell code can read or change anything the bot's account can.
L5
const { execSync } = require("child_process");L45
const df = execSync("df -k --total").toString().split("\n");
low
Dynamic require
require() is called with a value computed at runtime, so the loaded module cannot be known from reading the file.
L77
botVersion = require(process.cwd() + "/package.json").version || "unknown";capabilities — what this file can do, regardless of intent
Network
Filesystem
Shell
Env vars
Dynamic code
Session data
Installs packages
Process control
dependencies
pidusage
checks
Exports a command/module
Handles errors (try/catch or .catch)
Readable, not minified
Has explanatory comments
No deprecated dependencies
Reasonable size (< 200 KB)
raw source — loaded on demand
Loading source…