@beeos-ai/cli@1.2.7
BeeOS CLI — run AI agents from your desktop
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe bundled installers send default-on telemetry containing a hostname-derived identifier to BeeOS, which is identifying runtime information and warrants a warning. This is triggered by running the installer rather than by npm installation, and the reviewed CLI source did not show automatic credential exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs scripts/install.sh or scripts/install.ps1 to install BeeOS.
Impact
The publisher can associate an installation event with a machine hostname and platform details.
Mechanism
The installer posts install event, platform, Node version, status, and hostname-derived host_hint fields to the BeeOS telemetry endpoint. BEEOS_NO_TELEMETRY=1 disables it.
AI rationale
The bundled installers send default-on telemetry containing a hostname-derived identifier to BeeOS, which is identifying runtime information and warrants a warning. This is triggered by running the installer rather than by npm installation, and the reviewed CLI source did not show automatic credential exfiltration.
Evidence
scripts/install.shscripts/install.ps1
Network endpoints1
public-api.beeos.ai/api/v1/telemetry/install
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The shell installer builds a host_hint from the machine hostname and architecture and includes it with install event, OS, Node version, and status fields in telemetry.
- The installer posts this telemetry to the BeeOS API by default and sends a start event when its install routine begins; telemetry can be disabled with BEEOS_NO_TELEMETRY=1.
- The manifest has no npm install lifecycle hook; prepublishOnly only runs the build.
Evidence against
- Telemetry is sent to the package publisher’s API and contains install metadata rather than credentials, file contents, or project data.
- The CLI’s API-key option is forwarded to a separately invoked device-agent command; no automatic key collection or redirect was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @beeos-ai/cli@1.2.6
matchedIdentity = npm:QGJlZW9zLWFpL2NsaQ:1.2.6
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg5320import path2 from "path";
L5321: import { execFile } from "child_process";
L5322: import { promisify } from "util";
High
1720import { createHash } from "crypto";
L1721: function quotePowerShellLiteral(value) {
L1722: return `'${value.replace(/'/g, "''")}'`;
High
Findings
1 Critical5 High5 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Persistencedist/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumShips Build Helperscripts/install.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @beeos-ai/cli@1.2.7.
See all versions of @beeos-ai/cli for other recorded verdicts.
- Review the evidence and your use of @beeos-ai/cli@1.2.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.