registry / @cairnvibe/indexer / 0.4.3
@cairnvibe/indexer@0.4.3
Cairn's analyzer and installer (the `cairn` CLI) — scans Next.js source or crawls any running app, and scaffolds the backend either way.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged process execution is confined to explicit setup, update, and removal commands. Setup’s project analysis sends source to the LLM provider the user selects, consistent with the package’s analyzer purpose; no unrelated credential flow or concealed install-time behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs a Cairn CLI command; setup also adds a prebuild step for later project builds.
Impact
Expected project scaffolding and analysis; project source is sent to the user-selected LLM provider for description generation.
Mechanism
Setup scaffolds the target project, optionally installs Cairn packages, prompts for an LLM provider and key, and uses that provider to describe project pages. Update prompts before installing by default.
AI rationale
The flagged process execution is confined to explicit setup, update, and removal commands. Setup’s project analysis sends source to the LLM provider the user selects, consistent with the package’s analyzer purpose; no unrelated credential flow or concealed install-time behavior was found.
Evidence
.envpackage.json.cairn/target project files read during analysis
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and library entry point, with only build and typecheck scripts and no install lifecycle script.
- The CLI invokes setup, update, and remove only for their corresponding explicit commands.
- Setup installs a fixed list of Cairn packages when the user runs the setup wizard.
- Setup asks the user to choose an LLM provider and enter that provider’s key; the initial build runs only when a key was supplied.
- The analyzer sends project page source and element data to the selected LLM client to generate descriptions, matching the package’s stated purpose.
- Setup adds a prebuild command to regenerate the manifest on future builds.
Evidence against
- No credential collection or unrelated network transmission was identified.
- Update asks for confirmation before installing unless the user explicitly passes an apply/yes flag.
- The library entry point exports analysis functions without invoking the CLI.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
6 flaggeddist/remove.jsView file
19const node_path_1 = __importDefault(require("node:path"));
L20: const node_child_process_1 = require("node:child_process");
L21: const install_manifest_1 = require("./install-manifest");
High
17exports.runRemove = runRemove;
L18: const node_fs_1 = __importDefault(require("node:fs"));
L19: const node_path_1 = __importDefault(require("node:path"));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/remove.jsView on unpkg · L17dist/clack.jsView file
30// situation (used by ts-node, Jest, and others bridging CJS callers to
L31: // ESM-only packages): constructing the import call via `new Function(...)`
L32: // hides it from TypeScript's compiler entirely, so what actually runs at
Low
Eval
Findings
1 Critical3 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/setup.js
HighChild Processdist/remove.js
HighRuntime Package Installdist/update.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
MediumDynamic Requiredist/remove.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/clack.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cairnvibe/indexer@0.4.3.
See all versions of @cairnvibe/indexer for other recorded verdicts.
- Review the evidence and your use of @cairnvibe/indexer@0.4.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.