@cairnvibe/indexer@0.2.4
Cairn's analyzer and installer (the `cairn` CLI) — scans Next.js source or crawls any running app, and scaffolds the backend either way.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has risky, broad project-mutation and authenticated crawling capabilities behind explicit CLI commands, so it warrants a warning. It is not malicious under the install-hook policy because package installation alone triggers no lifecycle behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs cairn setup or cairn build with crawl mode and optional storage-state.
Impact
The command can persist changes in project configuration and expose crawled application content to the selected LLM service.
Mechanism
Project mutation, nested package installation, authenticated web crawling, and LLM submission.
AI rationale
The package has risky, broad project-mutation and authenticated crawling capabilities behind explicit CLI commands, so it warrants a warning. It is not malicious under the install-hook policy because package installation alone triggers no lifecycle behavior.
Evidence
dist/setup.jsdist/cli.jspackage.json.envui-manifest.json.cairn-cachecomponents/CairnCopilot.tsxapp/api/copilot/route.tspages/api/copilot.ts
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The explicit cairn setup command runs npm install including this package's own name.
- Setup writes user-supplied API keys to a project .env file and modifies package scripts.
- The CLI can crawl a supplied URL with a saved authenticated browser session and send collected page content to an LLM.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- Risky setup behavior is reached only through the explicit cairn setup command.
- No source evidence shows secret theft, hidden network destination, obfuscation, or automatic execution on package installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
5 flaggeddist/manifest.jsView file
3exports.assembleManifest = assembleManifest;
L4: const node_child_process_1 = require("node:child_process");
L5: function assembleManifest(rootDir, facts, l2, l3) {
High
dist/l3-describe.jsView file
8exports.describeAll = describeAll;
L9: const node_fs_1 = __importDefault(require("node:fs"));
L10: const node_path_1 = __importDefault(require("node:path"));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/l3-describe.jsView on unpkg · L8dist/setup.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @cairnvibe/indexer@0.2.0
matchedIdentity = npm:QGNhaXJudmliZS9pbmRleGVy:0.2.0
similarity = 0.632
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical2 High4 Medium3 Low
CriticalPrevious Version Dangerous Deltadist/setup.js
HighChild Processdist/manifest.js
HighRuntime Package Installdist/setup.js
MediumDynamic Requiredist/l3-describe.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/setup.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @cairnvibe/indexer@0.2.4.
See all versions of @cairnvibe/indexer for other recorded verdicts.
- Review the evidence and your use of @cairnvibe/indexer@0.2.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.