@cairnvibe/indexer@0.5.3
Cairn's analyzer and installer (the `cairn` CLI) — scans Next.js source or crawls any running app, and scaffolds the backend either way.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package has no install hook or automatic import-time attack identified. Its explicit setup command creates a project-level agent instruction file when none exists, a broader agent-context change that warrants a warning despite the benign, narrowly scoped text.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `cairn setup` in a project without an existing `AGENTS.md`.
Impact
Future coding agents may read the added project-level instruction and Cairn documentation. The generated text is limited to project context and does not direct agents to run commands or change permissions.
Mechanism
Writes `AGENTS.md` at the project root and `.cairn/CAIRN.md`; the root file adds a Cairn documentation link to agent instructions.
AI rationale
The package has no install hook or automatic import-time attack identified. Its explicit setup command creates a project-level agent instruction file when none exists, a broader agent-context change that warrants a warning despite the benign, narrowly scoped text.
Evidence
dist/setup.jsdist/cli.jsAGENTS.md.cairn/CAIRN.md
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- When `cairn setup` finds no project-root `AGENTS.md`, it creates one that directs agents to `.cairn/CAIRN.md`.
- The write is reached through the explicit `setup` CLI command.
Evidence against
- The package has no install, preinstall, or postinstall lifecycle script.
- The generated `AGENTS.md` is only created when one does not already exist, and its text points to Cairn documentation.
- The flagged process execution is part of user-invoked setup, update, or remove commands.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/remove.jsView file
19const node_path_1 = __importDefault(require("node:path"));
L20: const node_child_process_1 = require("node:child_process");
L21: const install_manifest_1 = require("./install-manifest");
High
dist/clack.jsView file
30// situation (used by ts-node, Jest, and others bridging CJS callers to
L31: // ESM-only packages): constructing the import call via `new Function(...)`
L32: // hides it from TypeScript's compiler entirely, so what actually runs at
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/clack.jsView on unpkg · L30dist/update.jsView file
141
Findings
1 Critical4 High2 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/setup.js
HighChild Processdist/remove.js
HighShell
HighRuntime Package Installdist/update.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/clack.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @cairnvibe/indexer@0.5.3.
See all versions of @cairnvibe/indexer for other recorded verdicts.
- Review the evidence and your use of @cairnvibe/indexer@0.5.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.