AI risk level

Low

Recommendation

install

Model

~deepseek/deepseek-v4-flash-latest

Analyzed commit

385ba71

Reviewed

3 days ago

The plugin is a transparent local reverse proxy for dev servers. It scans /proc for listeners, proxies *.localhost to those services, and can optionally install a loopback-only nftables redirect via a polkit prompt. All system-level changes are documented and user-initiated; no malicious or hidden behavior was found in the sampled code.

• • The plugin creates persistent user systemd services and, when port 80 is occupied, attempts to install a root nftables redirect and systemd unit with a pkexec prompt, which is a significant but well-documented system change.
• • The proxy can expose any local listening port to *.localhost; while loopback-only, a user might unintentionally make a sensitive local service accessible to other local processes or browsers.
• • There are odd literal strings like "https://example.net/id/garnet" in match arms that appear to be typos or leftover placeholders, but they have no harmful effect.
• • The plugin can terminate user processes via the UI (SIGTERM/SIGKILL), which could be destructive if clicked accidentally, though this requires explicit user action.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.