@1sat/cli@0.0.100
CLI for 1Sat Ordinals SDK
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe install-time script is a local Bun availability check, not a downloader or mutator. Runtime network and key operations support explicit wallet CLI features, with no concrete malicious chain found.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation or an explicit CLI command.
Impact
No unconsented credential collection, remote payload execution, or agent-control mutation was found.
Mechanism
Bun runtime check and user-invoked wallet service operations.
AI rationale
The install-time script is a local Bun availability check, not a downloader or mutator. Runtime network and key operations support explicit wallet CLI features, with no concrete malicious chain found.
Evidence
package.jsonscripts/check-bun.cjssrc/commands/mcp-proxy.tssrc/commands/authfetch.tssrc/repricer/whatsOnChain.tssrc/keys.tssrc/cli.ts
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The preinstall hook only runs a Bun version check and exits with setup guidance if Bun is unavailable.
- The MCP proxy is an explicit CLI subcommand and connects only to a loopback URL by default.
- The authenticated HTTP command requires a user-supplied URL and prompts before a payment retry.
- The rate provider fetches a public exchange-rate endpoint only when its provider is used.
Evidence against
- No install hook downloads code, modifies agent settings, or accesses credentials.
- No source evidence shows credential or file exfiltration.
- Key material is stored as an encrypted local file with restrictive permissions.
- Network operations are command-driven or service-related, not import-time collection.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/check-bun.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/check-bun.cjsView file
2const { spawnSync } = require('node:child_process')
const result = spawnSync('bun', ['--version'], { stdio: 'ignore' })
if (result.error || result.status !== 0) {
Low
Suspicious Lifecycle Evidence
The preinstall hook only runs a Bun version check and exits with setup guidance if Bun is unavailable.
scripts/check-bun.cjsView on unpkg · L2src/commands/mcp-proxy.tsView file
14initLogger({ env: { service: '1sat-mcp-proxy' } })
const MCP_URL = process.env.ONESAT_MCP_URL ?? 'http://127.0.0.1:3322'
const KEY_DIR = `${process.env.HOME}/.1sat-wallet`
const CLIENT_KEY_PATH = `${KEY_DIR}/mcp-agent.key`
Findings
1 High3 Medium8 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencescripts/check-bun.cjs
LowAi Review Evidencesrc/commands/mcp-proxy.ts
LowAi Review Evidencesrc/commands/authfetch.ts
LowAi Review Evidencesrc/commands/authfetch.ts
Affected versions and remediation
This report applies to @1sat/cli@0.0.100.
See all versions of @1sat/cli for other recorded verdicts.
- Review the evidence and your use of @1sat/cli@0.0.100 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.