@caishenai/cli@0.0.145
Configure Claude Code, Codex, Grok Build and other coding tools for 财神 AI with one command
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package enables runtime telemetry by default, sends command and diagnostic events to its service, and provides an environment opt-out. I found no disclosure in the package description, so this meets the criteria for suspicious telemetry.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI; telemetry is enabled unless CAISHEN_TELEMETRY is set to 0, false, or off.
Impact
The vendor receives command activity and diagnostic information without disclosure in the package description.
Mechanism
The CLI buffers command and operation events, then posts them to /api/platform/vibecode/telemetry using the configured service base URL. Event errors and details may be included; errors are masked for home paths and common key patterns.
AI rationale
The package enables runtime telemetry by default, sends command and diagnostic events to its service, and provides an environment opt-out. I found no disclosure in the package description, so this meets the criteria for suspicious telemetry.
Evidence
dist/lib/telemetry.jsdist/lib/command.jsdist/brand.json
Network endpoints1
ai.caishen.best/api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI records command, step, status, timing, error text, and event details for telemetry; home paths and common API-key patterns are masked in error text.
- Telemetry is enabled by default and posts events to /api/platform/vibecode/telemetry at the configured service base URL.
- The package description does not disclose telemetry; the environment setting CAISHEN_TELEMETRY can disable it.
Evidence against
- Telemetry includes package/runtime and platform metadata, a random session ID, command flags, and event outcomes; the reviewed flows do not show credential or file-content collection.
- The package is a CLI for configuring coding tools, and its install and plugin actions are exposed through user-run setup flows.
- No install lifecycle scripts are declared in package.json.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/lib/tools/desktop-process.jsView file
1import{spawnSync as e}from"child_process";import{logger as t}from"../../utils/logger.js";export const WINDOWS_PACKAGE_FAMILIES=["Claude_pzs8sxrjxfjjc","AnthropicPBC.Claude_fnn82j28...
High
Child Process
Package source references child process execution.
dist/lib/tools/desktop-process.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as r,realpathSync as n,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium3 Low
CriticalPrevious Version Dangerous Deltadist/lib/tool-manager.js
HighChild Processdist/lib/tools/desktop-process.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @caishenai/cli@0.0.145.
See all versions of @caishenai/cli for other recorded verdicts.
- Review the evidence and your use of @caishenai/cli@0.0.145 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.