registry / @aizoo321/cli
@aizoo321/cli
Configure Claude Code, Codex, Grok Build and other coding tools for Zoo AI with one command
This report shows the evidence for @aizoo321/cli@0.0.167. 0 of 23 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1h ago · by lpm-firewall-aiThe manifest has no install lifecycle scripts, and the entry points match the stated CLI purpose. Runtime telemetry is enabled by default but disclosed with an opt-out, and the reviewed network requests target the configured service or installer sources.
Static reason
One or more suspicious static signals were detected.
Trigger
Telemetry runs when a user invokes the CLI; tool installation and configuration changes are tied to user-run commands.
Impact
The reviewed behavior is consistent with the package's stated purpose; no malicious collection, unrelated execution, or unrequested account action was identified.
Mechanism
Telemetry sends usage events to the configured Zoo AI service. Setup features can write assistant configuration and invoke installers for selected tools.
AI rationale
The manifest has no install lifecycle scripts, and the entry points match the stated CLI purpose. Runtime telemetry is enabled by default but disclosed with an opt-out, and the reviewed network requests target the configured service or installer sources.
Network endpoints4
ai.zoo321.comregistry.npmjs.orgregistry.npmmirror.comcnb.cool
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to a library entry and a CLI binary, and declares no lifecycle scripts.
- The package describes itself as a tool for configuring coding assistants; its library entry exports modules rather than invoking the CLI.
- Telemetry is disclosed in the English locale and can be disabled with ZOO_AI_TELEMETRY=0.
- Telemetry events contain command, step, status, timing and masked error details; API requests use the configured service base URL.
Evidence against
- Runtime telemetry is enabled by default, though it is disclosed and has an opt-out.
- User-run setup and install commands can write configuration, install assistant plugins, and invoke shell commands to install tools.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
5 High4 Medium3 Low
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @aizoo321/cli@0.0.167.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @aizoo321/cli@0.0.167 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.