registry / @auspex-ai/cli / 0.2.0
@auspex-ai/cli@0.2.0
Auspex command-line tool
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and its credential-bearing requests target the configured Auspex server as part of explicit CLI operations. The scanner's execution and credential indicators are consistent with the package's stated CLI and self-hosting purpose.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the auspex CLI and selects a command such as login or selfhost.
Impact
No automatic credential collection, unrelated data transfer, or unrequested account action was identified.
Mechanism
The CLI sends bearer credentials to the configured Auspex server and performs browser-based sign-in for a selected self-hosted server.
AI rationale
The package has no install lifecycle hook, and its credential-bearing requests target the configured Auspex server as part of explicit CLI operations. The scanner's execution and credential indicators are consistent with the package's stated CLI and self-hosting purpose.
Network endpoints2
app.auspex.blueServer selected with --server or AUSPEX_SERVER
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/bin.mjs as a CLI and declares build, development, lint, typecheck, and test scripts; it has no install lifecycle hook.
- The HTTP helper sends a bearer token only to the URL passed to it.
- The default server is https://app.auspex.blue; users can select another server with --server or AUSPEX_SERVER.
- Login and self-host actions run through explicit CLI commands; self-host login accepts a server option and performs a browser sign-in.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/bin.mjsView file
5import { createHash, randomBytes } from "node:crypto";
L6: import { execFile, spawn } from "node:child_process";
L7: import { createServer } from "node:http";
L8: import { homedir } from "node:os";
...
L15: const xdg = deps.env.XDG_CONFIG_HOME?.trim();
L16: const base = xdg?.startsWith("/") ? xdg : join(deps.homedir(), ".config");
L17: return join(base, "auspex", name);
...
L47: try {
L48: const v = JSON.parse(raw);
L49: return isCredentials(v) ? v : null;
...
L98: },
L99: body: JSON.stringify(body)
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/bin.mjsView on unpkg · L55Trigger-reachable chain: manifest.bin -> dist/bin.mjs
L5: import { createHash, randomBytes } from "node:crypto";
L6: import { execFile, spawn } from "node:child_process";
L7: import { createServer } from "node:http";
L8: import { homedir } from "node:os";
...
L15: const xdg = deps.env.XDG_CONFIG_HOME?.trim();
L16: const base = xdg?.startsWith("/") ? xdg : join(deps.homedir(), ".config");
L17: return join(base, "auspex", name);
...
L47: try {
L48: const v = JSON.parse(raw);
L49: return isCredentials(v) ? v : null;
...
L98: },
L99: body: JSON.stringify(body)
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/bin.mjsView on unpkg · L5Findings
2 Critical3 High3 Medium4 Low
CriticalCredential Exfiltrationdist/bin.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/bin.mjs
HighChild Processdist/bin.mjs
HighCommand Output Exfiltrationdist/bin.mjs
HighTrigger Reachable Credential Exfiltrationdist/bin.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @auspex-ai/cli@0.2.0.
See all versions of @auspex-ai/cli for other recorded verdicts.
- Review the evidence and your use of @auspex-ai/cli@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.