Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/index.js:297
- Evidence
const match = /^([01]?\d|2[0-3]):([0-5]\d)$/u.exec(value.trim());
Security audit
Store Report Assistant
Security checks for vulnerabilities and agentic risk
Overview
The plugin appears purpose-aligned for archiving store business messages and generating reports, but it handles sensitive chat data, optional voice transcription, local execution, and scheduled posting that users should configure carefully.
Before installing, confirm which store chats are bound, where the SQLite database is stored, how long records are retained, whether exports should be redacted by default, whether voice transcription uses a trusted provider or local binary, and whether any scheduled reports should be enabled.
Static analysis
Detected: suspicious.dangerous_exec