@1sat/cli@0.1.0
⚠ Under reviewCLI for 1Sat Ordinals SDK
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe flagged process execution is a fixed detached monitor command, and the manifest has no install hook. The active @1sat/actions dependency was unresolved, so its runtime behavior could not be verified; manual review is needed.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Importing or running CLI commands that initialize the shared context.
Impact
The unavailable dependency prevents a complete assessment of runtime behavior.
Mechanism
The context imports @1sat/actions, but that dependency’s implementation could not be inspected.
AI rationale
The flagged process execution is a fixed detached monitor command, and the manifest has no install hook. The active @1sat/actions dependency was unresolved, so its runtime behavior could not be verified; manual review is needed.
Evidence
package.jsonsrc/context.ts
Decision evidence
public snapshotAI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares @1sat/actions as a runtime dependency, and the CLI imports createContext from it; its implementation was unavailable for review.
- The detached monitor starts the CLI’s fixed __monitor-once command and passes the wallet key to that child process.
- The MCP proxy forwards stdin requests to its configured local server as part of an explicitly invoked CLI command.
Evidence against
- The manifest has no install lifecycle hook.
- The inspected child-process code invokes a fixed internal monitor command rather than constructing a shell command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @1sat/cli@0.0.125
matchedIdentity = npm:QDFzYXQvY2xp:0.0.125
similarity = 0.739
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg297// src/monitor-once.ts
L298: import { spawn } from "node:child_process";
L299: import { appendFileSync, closeSync, openSync } from "node:fs";
High
117const raw = readFileSync(CONFIG_FILE, "utf8");
L118: const parsed = JSON.parse(raw);
L119: return { ...DEFAULT_CONFIG, ...parsed };
...
L187: var init_config = __esm(() => {
L188: CONFIG_DIR = join(homedir(), ".1sat", "cli");
L189: CONFIG_FILE = join(CONFIG_DIR, "config.json");
...
L198: import { join as join2 } from "node:path";
L199: import { PrivateKey } from "@bsv/sdk";
L200: import { isCancel, password as promptPassword } from "@clack/prompts";
...
L205: function hasKey() {
L206: if (process.env.PRIVATE_KEY_WIF)
L207: return true;
High
Findings
1 Critical2 High2 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighCommand Output Exfiltrationdist/cli.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Dependency Evidencepackage.json
LowSuspicious Dependency Evidencesrc/context.ts
LowAi Review Evidencesrc/monitor-once.ts
Affected versions and remediation
This report applies to @1sat/cli@0.1.0.
See all versions of @1sat/cli for other recorded verdicts.
- Review the evidence and your use of @1sat/cli@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.