@cairnvibe/indexer@0.2.6
Cairn's analyzer and installer (the `cairn` CLI) — scans Next.js source or crawls any running app, and scaffolds the backend either way.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has an explicit-user-command, self-installing project setup path with persistent consumer-project changes and source disclosure to configured LLM providers. It lacks install-time hooks and concrete malicious behavior, so this is a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs cairn setup or cairn build.
Impact
Consumer scripts and configuration can be changed; application source is disclosed to the selected LLM service.
Mechanism
Project scaffolding, runtime package installation, and LLM source submission.
AI rationale
The package has an explicit-user-command, self-installing project setup path with persistent consumer-project changes and source disclosure to configured LLM providers. It lacks install-time hooks and concrete malicious behavior, so this is a warning rather than a block.
Evidence
dist/setup.jsdist/cli.jsdist/llm.js.envpackage.jsonapp/layout.tsxpages/_app.tsxcomponents/CairnCopilot.tsxui-manifest.json
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit setup command can install the package's own name into the consumer project at runtime.
- Setup writes supplied API keys to .env and rewrites consumer package scripts, including prebuild and optionally dev.
- Build sends scanned application source to configured Anthropic or Groq SDK clients.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The setup path is reached only through the explicit cairn setup CLI command.
- No hidden endpoint, secret harvesting, destructive deletion, or automatic execution on import was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
7 flaggeddist/manifest.jsView file
4exports.parseApiCall = parseApiCall;
L5: const node_child_process_1 = require("node:child_process");
L6: function assembleManifest(rootDir, facts, l2, l3) {
High
dist/l3-describe.jsView file
8exports.describeAll = describeAll;
L9: const node_fs_1 = __importDefault(require("node:fs"));
L10: const node_path_1 = __importDefault(require("node:path"));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/l3-describe.jsView on unpkg · L8dist/setup.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @cairnvibe/indexer@0.2.0
matchedIdentity = npm:QGNhaXJudmliZS9pbmRleGVy:0.2.0
similarity = 0.579
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical2 High6 Medium3 Low
CriticalPrevious Version Dangerous Deltadist/setup.js
HighChild Processdist/manifest.js
HighRuntime Package Installdist/setup.js
MediumDynamic Requiredist/l3-describe.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/setup.js
MediumAi Review Evidencedist/setup.js
MediumAi Review Evidencedist/setup.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @cairnvibe/indexer@0.2.6.
See all versions of @cairnvibe/indexer for other recorded verdicts.
- Review the evidence and your use of @cairnvibe/indexer@0.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.