registry / @cairnvibe/indexer / 0.2.8
@cairnvibe/indexer@0.2.8
Cairn's analyzer and installer (the `cairn` CLI) — scans Next.js source or crawls any running app, and scaffolds the backend either way.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package has no install hook, and importing its library entry only exposes API functions. Dependency installation and project edits happen through the user-invoked setup wizard, while generated WebMCP actions are limited to statically traced same-origin requests.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No behavior runs at install or library import; setup and WebMCP generation require explicit CLI commands.
Impact
No unauthorized credential transfer or other malicious impact was found in the reviewed paths.
Mechanism
The package scans application source, calls configured LLM providers to describe pages, and can generate a component exposing statically traced same-origin actions.
AI rationale
The package has no install hook, and importing its library entry only exposes API functions. Dependency installation and project edits happen through the user-invoked setup wizard, while generated WebMCP actions are limited to statically traced same-origin requests.
Evidence
package.jsondist/cli.jsdist/index.jsdist/setup.jsdist/webmcp.jsdist/manifest.js
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares no install, preinstall or postinstall hook; its scripts are build and typecheck.
- The library entry point exports functions and classes without starting the CLI at import time.
- The package installer runs only inside the explicit `cairn setup` command and installs the package’s documented Cairn dependencies.
- Setup asks the user whether to configure an LLM provider and prompts for its key; the key is then used to build the manifest.
- Manifest action parsing accepts only static, same-origin relative URLs and mutating HTTP methods.
Evidence against
- The CLI has a `setup` command that can install dependencies, write project files and add a prebuild script.
- The generated WebMCP component can register traced mutating actions for browser agents when a user generates and adds it to their app.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
6 flaggeddist/manifest.jsView file
4exports.parseApiCall = parseApiCall;
L5: const node_child_process_1 = require("node:child_process");
L6: function assembleManifest(rootDir, facts, l2, l3) {
High
dist/setup.jsView file
170try {
L171: (0, node_child_process_1.execSync)(`npm install ${PACKAGES.join(" ")}`, { cwd: absDir, stdio: "pipe" });
L172: spinner.stop((0, ui_1.green)(`✓ installed ${PACKAGES.join(", ")}`));
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/setup.jsView on unpkg · L170165ng setup after a partial run).
const pkg = readPackageJson(absDir);
if (!alreadyInstalled(pkg)) {
const spinner = new ui_1.Spinner(`Installing ${PACKAGES.join(", ")} ...`);
spinner.start();
try {
(0, node_child_process_1.execSync)(`npm install ${PACKAGES.join(" ")}`, { cwd: absDir, stdio: "pipe" });
spinner.stop((0, ui_1.green)(`✓ installed ${PACKAGES.join(", ")}`));
}
catch {
spinner.stop((0, ui_1.red)("✗ np
Findings
1 Critical2 High2 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/manifest.js
HighRuntime Package Installdist/setup.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowSuspicious Dependency Evidencedist/setup.js
Affected versions and remediation
This report applies to @cairnvibe/indexer@0.2.8.
See all versions of @cairnvibe/indexer for other recorded verdicts.
- Review the evidence and your use of @cairnvibe/indexer@0.2.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.