registry / @apilift/cli / 1.4.39
@apilift/cli@1.4.39
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection resolved the scanner hints to schema validation, fixed local process inspection, user-invoked agent setup, and usage measurement collection. Credential setup is explicit and local, and app requests are constrained to the selected transport's allowed origins.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes a CLI command; the package has no install lifecycle hook.
Impact
No unconsented credential disclosure, remote code execution, or agent control-surface mutation was established.
Mechanism
Inspected dynamic evaluation builds schema validators, and the capture worker runs fixed process-inspection code.
AI rationale
Source inspection resolved the scanner hints to schema validation, fixed local process inspection, user-invoked agent setup, and usage measurement collection. Credential setup is explicit and local, and app requests are constrained to the selected transport's allowed origins.
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes CLI binaries and only build, typecheck, and test scripts; it has no install lifecycle hook.
- Setup submits a one-time code supplied by the Apilift setup page to the configured registry and saves the returned installation token. App credentials use an explicit secure setup flow and are scoped to declared app destinations.
- Agent plugin installation is reached through the explicit setup-continue command and uses local agent plugin commands; the manifest has no install hook that mutates agent configuration.
- The indicated session-audit location is tokenizer data. The audit command requires a supplied transcript or session and writes a local report.
- The collector reads transcript paths to reconcile usage facts, then sends derived measurements to the Apilift service; the payload contains usage metadata rather than transcript text.
- The flagged dynamic evaluation generates schema validators, the capture worker uses fixed process-inspection code, and the native host checks its caller against the configured extension origin.
Evidence against
- The scanner's remote-code-execution hint is not supported by the inspected capture worker: its evaluated source is a fixed process metadata script.
Source & flagged code
5 flaggeddist/apilift.jsView file
76const {workerData}=require('node:worker_threads');
L77: const {spawn}=require('node:child_process');
L78: const state=new Int32Array(workerData.memory,0,4), value=new Float64Array(workerData.memory,16,1);
High
23778sourceCode = this.opts.code.process(sourceCode, sch);
L23779: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L23780: const validate2 = makeValidate(this, this.scope.get());
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/apilift.js:
script = `$ErrorActionPreference='Stop'; while ($null -ne ($line=[Console]::ReadLine())) { $parts=$line.Split('|'); try { $p=[System.Diagnostics.Process]::GetProcessById([int]$part...
import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync } from "node:fs";
writeFileSync(join(directory, "owner.json"), JSON.stringify(owner), { flag: "wx", mode: 384 });
transportDefinitionSchema = external_exports.strictObject({ title, description: requiredDescription, mode: external_exports.enum(["direct", "browser"]), baseUrl: requestUrlSchema.o...
if (v.mode === "direct" && !v.baseUrl)
ctx.addIssue({ cod
Findings
1 Critical4 High3 Medium6 Low
CriticalRemote Response Code Executiondist/apilift-capture-server.js
HighChild Processdist/apilift.js
HighEvaldist/apilift.js
HighCredential Redirect Persistencedist/apilift.js
HighCross File Remote Execution Contextdist/apilift.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @apilift/cli@1.4.39.
See all versions of @apilift/cli for other recorded verdicts.
- Review the evidence and your use of @apilift/cli@1.4.39 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.