Better Nunjucks

AI Security Review

Evidence context: threat category none; evidence quality moderate.

Filesystem / Process Access

The extension only reads static assets such as extension/changelog.md, extension/readme.md, extension/src/syntaxes/nunjucks.tmLanguage.json, and snippet files. The YARA matches titled YARA--postinstall_system_command, YARA--postinstall_network_communication, YARA--postinstall_file_download, and YARA--postinstall_registry_modification are triggered on these markdown and JSON files. These findings belong to the postinstall code‑smell rule set, which fires on any occurrence of typical Node.js words (e.g., exec, fetch, fs). They do not reveal an actual script that runs a child process or writes to the system registry. Consequently, the filesystem reads are fully justified for a syntax‑highlighting extension and no process‑spawning code was observed.

Credential Access

A single YARA match YARA--credential_env_files appears in extension/ovsx.js. This rule flags any reference to environment‑variable patterns, not a concrete read of .env, .ssh keys, or cloud credential files. The file ovsx.js only contains metadata for publishing to Open VSX and does not contain code that accesses the developer’s secret storage. Therefore, there is no evidence of real credential theft.

Counterargument & Rebuttal

One might argue that the repeated high‑severity “malware‑signature” tags imply a malicious post‑install payload. However, the CVEQ platform documents that all postinstall YARA rules are classified as low‑confidence code‑smell detections and generate false positives on ordinary extension source files. The matches are all located in documentation or static JSON assets, not in executable scripts. No network request, file‑write, or registry‑modify code is present, so the counterargument does not change the conclusion that the extension is benign.

Key Reasons

• All high‑severity matches are from generic postinstall YARA rules
• Findings occur in non‑executable markdown and JSON assets
• No actual process‑execution or network‑call code detected
• Credential rule flags only a pattern, not real secret reads

False Positive Considerations

• postinstall YARA code‑smell rules
• bundled static documentation triggering signatures
• environment‑variable pattern matcher
• absence of executable payload

Reviewed 2026-05-23; recommended action: no action; model confidence 85%.