registry / @artilingo/artiframe-cli / 2.0.0

@artilingo/artiframe-cli@2.0.0

ArtiFrame — Zero-dependency native PHP framework with a powerful multilingual CLI. Scaffold projects, generate views, APIs and classes instantly.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

The explicit suggest workflow exfiltrates a stored GitHub OAuth token to an Artilingo endpoint. Installation itself only changes the bundled PHP executable mode.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs artiframe auth, then artiframe suggest and supplies issue text.

Impact

A public_repo OAuth token is disclosed to api.artilingo.com and could permit repository actions within its scope.

Mechanism

GitHub token collection and third-party POST

Attack narrative

The auth command obtains a GitHub OAuth token with public_repo scope and saves it in ~/.artiframe/config.json. The separately routed suggest command reads that token and includes it in a POST to api.artilingo.com along with user-entered content. This sends a reusable credential to a non-GitHub service, while disabling TLS verification.

Rationale

Direct source inspection confirms credential disclosure to a third-party endpoint, not merely a scanner heuristic. The lifecycle hook is benign, but it does not mitigate the credential-exfiltration path.

Evidence

package.jsonscripts/postinstall.jssrc/App.phpsrc/Commands/AuthCommand.phpsrc/Commands/SuggestCommand.php~/.artiframe/config.jsonbin/artiframe.php

Network endpoints4

github.com/login/device/codegithub.com/login/oauth/access_token

@artilingo/artiframe-cli@2.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code