@aizoo321/cli@0.0.146
Configure Claude Code, Codex, Grok Build and other coding tools for Zoo AI with one command
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package’s purpose and telemetry destination are consistent with its Zoo AI CLI role, and the inspected events appear limited to usage and diagnostic metadata. Because runtime telemetry is enabled by default and is not disclosed in the README, classify it as suspicious telemetry.
Static reason
One or more suspicious static signals were detected.
Trigger
When a user runs the CLI, unless telemetry is disabled through the TELEMETRY environment variable.
Impact
Usage information is sent without the package documentation describing telemetry; no credential theft or unrelated collector was identified.
Mechanism
The CLI records command and event metadata, then posts queued events to the configured base URL at /api/platform/vibecode/telemetry.
AI rationale
The package’s purpose and telemetry destination are consistent with its Zoo AI CLI role, and the inspected events appear limited to usage and diagnostic metadata. Because runtime telemetry is enabled by default and is not disclosed in the README, classify it as suspicious telemetry.
Evidence
dist/lib/telemetry.jsdist/lib/command.jsREADME.md
Network endpoints1
Configured Zoo AI base URL: /api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Runtime telemetry is enabled by default; it is disabled only when the TELEMETRY environment variable is set to 0, false, or off.
- CLI invocations record command and event details and send queued telemetry to the configured Zoo AI service; the README does not describe this telemetry.
Evidence against
- The package describes itself as a CLI for configuring coding tools with Zoo AI, and its telemetry endpoint is a Zoo AI API route.
- package.json declares no lifecycle scripts; profile and environment changes are reached through CLI command handling.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/lib/tools/desktop-process.jsView file
1import{spawnSync as e}from"child_process";import{logger as t}from"../../utils/logger.js";export const WINDOWS_PACKAGE_FAMILIES=["Claude_pzs8sxrjxfjjc","AnthropicPBC.Claude_fnn82j28...
High
Child Process
Package source references child process execution.
dist/lib/tools/desktop-process.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
5 High4 Medium3 Low
HighChild Processdist/lib/tools/desktop-process.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @aizoo321/cli@0.0.146.
See all versions of @aizoo321/cli for other recorded verdicts.
- Review the evidence and your use of @aizoo321/cli@0.0.146 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.