{
  "ml": {
    "v": "7",
    "id": 569,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000008722146048967261,
    "type": "javascript",
    "version": "v18.18",
    "analyzed_at": "2026-09-09T09:46:47Z"
  },
  "path": "opt/ghostex/dist/sidebar/kanban.html##unicode-escape@922931",
  "raw": {
    "rev": "52359",
    "files": [
      {
        "id": 569,
        "mol": "H₂(DbOs)",
        "pid": 1,
        "rel": "fetched",
        "sha": "be9230752eea6f8f9e3e9e2c68efb4b0b5d2829c15ecd77ff8306969d6831d32",
        "via": "https://github.com/maddada/Ghostex/releases/download/v9.0.0/ghostex-9.0.0-linux-x64.tar.zst",
        "path": "https://github.com/maddada/Ghostex/releases/download/v9.0.0/ghostex-9.0.0-linux-x64.tar.zst!!opt/ghostex/dist/sidebar/kanban.html!!opt/ghostex/dist/sidebar/kanban.html##unicode-escape@922931",
        "risk": 3,
        "size": 9580,
        "type": "javascript",
        "depth": 4,
        "facts": {
          "metrics": {
            "ast": {
              "max_depth": 7,
              "call_count": 2,
              "node_count": 68
            },
            "file": {
              "size": 9580,
              "entropy": 5.35
            },
            "text": {
              "lines": 1,
              "top_char": 101,
              "max_ws_run": 1,
              "digit_ratio": 0.01,
              "space_count": 220,
              "char_entropy": 5.35,
              "unique_chars": 94,
              "top_char_null": 0,
              "lines_over_200": 1,
              "lines_over_500": 1,
              "string_density": 4,
              "top_char_ratio": 0.09,
              "avg_line_length": 9580,
              "lines_over_1000": 1,
              "max_line_length": 9580,
              "non_ascii_ratio": 0,
              "last_line_length": 9580,
              "long_token_count": 28,
              "whitespace_ratio": 0.02,
              "identifier_density": 11,
              "normalized_string_count": 4,
              "suspicious_string_ratio": 0.75,
              "suspicious_comment_ratio": 1,
              "suspicious_identifier_ratio": 0.4
            },
            "binary": {
              "peak_region_bytes": 8556,
              "peak_region_entropy": 5.41
            },
            "strings": {
              "bytes": 6676,
              "count": 4,
              "shell": 1,
              "very_long": 1,
              "avg_length": 1669,
              "max_length": 5634,
              "avg_entropy": 4.37,
              "entropy_stddev": 0.91,
              "high_entropy_count": 2,
              "embedded_code_candidates": 2
            },
            "comments": {
              "code": 1,
              "chars": 2831,
              "count": 1,
              "lines": 1,
              "todo_count": 1,
              "high_entropy": 1
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_unknown": 1
            },
            "identifiers": {
              "count": 11,
              "unique": 10,
              "avg_length": 3.6,
              "max_length": 14,
              "min_length": 1,
              "avg_entropy": 1.13,
              "reuse_ratio": 0.91,
              "length_stddev": 3.9,
              "sequential_names": 4,
              "single_char_count": 5,
              "single_char_ratio": 0.5,
              "all_lowercase_ratio": 0.6
            }
          }
        },
        "traits": [
          {
            "id": "metadata/build/minifier::void-zero",
            "conf": 0.6,
            "crit": 2,
            "desc": "Uses minifier-style void 0 for undefined",
            "spans": [
              [
                1,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/profile/language::lang-english--atom-5",
            "conf": 0.8,
            "crit": 2,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                242,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::use-strict-directive",
            "conf": 0.6,
            "crit": 1,
            "desc": "Contains a JavaScript use strict directive",
            "spans": [
              [
                1107,
                0
              ]
            ]
          },
          {
            "id": "metadata/library/structure::js-distribution-output-path",
            "conf": 0.96,
            "crit": 2,
            "desc": "JavaScript distribution output path",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/db/web-storage::dom-storage-getitem",
            "conf": 0.9,
            "crit": 3,
            "desc": "Reads browser storage with getItem",
            "spans": [
              [
                5473,
                20
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/db/web-storage::window-localstorage-getitem",
            "conf": 0.82,
            "crit": 3,
            "desc": "Reads window.localStorage with getItem",
            "spans": [
              [
                5466,
                28
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/llm::agent-identity-copilot",
            "conf": 0.8,
            "crit": 1,
            "desc": "Copilot identity reference",
            "spans": [
              [
                3365,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/json::command-field-key",
            "conf": 0.9,
            "crit": 1,
            "desc": "JSON-like object command field",
            "spans": [
              [
                2979,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/machine-id::machineid-identifier-field",
            "atk": "T1082",
            "mbc": "E1082",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a machine identifier field",
            "spans": [
              [
                8557,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/agent::claude-cli-literal",
            "atk": "T1059",
            "mbc": "B0022",
            "conf": 0.88,
            "crit": 1,
            "desc": "Claude CLI command token",
            "spans": [
              [
                3032,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/metrics::low-whitespace",
            "conf": 0.7,
            "crit": 2,
            "desc": "Very low whitespace ratio (minified/compressed)",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/string/telemetry::session-id-field-js",
            "conf": 0.88,
            "crit": 1,
            "desc": "Contains a session identifier field",
            "spans": [
              [
                10,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::arrow-function",
            "conf": 0.9,
            "crit": 1,
            "desc": "ES6 arrow function syntax",
            "spans": [
              [
                461,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::const-let",
            "conf": 0.9,
            "crit": 1,
            "desc": "ES6 const/let declarations",
            "spans": [
              [
                80,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::spread-operator",
            "conf": 0.9,
            "crit": 1,
            "desc": "ES6 spread operator (in array/object context)",
            "spans": [
              [
                2375,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::catch-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a catch error handler",
            "spans": [
              [
                5549,
                0
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::terser-output",
            "conf": 0.85,
            "crit": 2,
            "desc": "JavaScript minifier output markers",
            "uses": [
              0,
              2
            ],
            "spans": [
              [
                1,
                0
              ]
            ]
          },
          {
            "id": "metadata/library/structure::js-any-bundle-output",
            "conf": 0.95,
            "crit": 2,
            "desc": "Contains bundled or minified JavaScript",
            "uses": [
              16
            ],
            "spans": [
              [
                1,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/create/shell/guard::node-temp-exec-benign-context",
            "conf": 0.9,
            "crit": 1,
            "desc": "Benign Node temp execution context",
            "uses": [
              3,
              17
            ],
            "spans": [
              [
                0,
                0
              ],
              [
                1,
                0
              ]
            ]
          }
        ]
      }
    ]
  }
}