@caishenai/cli@0.0.155
Configure Claude Code, Codex, Grok Build and other coding tools for 财神 AI with one command
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package’s primary setup and upgrade behaviors fit its CLI purpose, and I found no malicious credential exfiltration or install-time activity. However, runtime telemetry is enabled by default and is not disclosed in the reviewed documentation, so this version warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI normally records events and flushes them when the command completes.
Impact
The publisher’s service receives usage and diagnostic data without clear disclosure in the reviewed package documentation. No unrelated credential collection was identified.
Mechanism
The CLI sends command names, selected flags, statuses, durations, details, and masked error text to the configured gateway.
AI rationale
The package’s primary setup and upgrade behaviors fit its CLI purpose, and I found no malicious credential exfiltration or install-time activity. However, runtime telemetry is enabled by default and is not disclosed in the reviewed documentation, so this version warrants a warning.
Evidence
dist/lib/telemetry.jsdist/lib/command.jsdist/brand.jsonREADME.md
Network endpoints1
ai.caishen.best/api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Telemetry is enabled by default; it can be disabled with the CAISHEN_TELEMETRY environment setting.
- Normal CLI execution records the command and selected flags, then flushes telemetry when the command finishes.
- Events include command, status, duration, details, and error text, with error text masked and truncated.
- Telemetry is posted to the configured gateway at /api/platform/vibecode/telemetry; the package’s default gateway is ai.caishen.best.
Evidence against
- The package is presented as a CLI for configuring coding tools with the publisher’s API key.
- The telemetry payload does not include command argument values in the command-start event, and error text is masked.
- The telemetry endpoint belongs to the package’s configured service; no credential theft or unrelated collector was identified.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinified
Source & flagged code
7 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium3 Low
CriticalPrevious Version Dangerous Deltadist/lib/components.js
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @caishenai/cli@0.0.155.
See all versions of @caishenai/cli for other recorded verdicts.
- Review the evidence and your use of @caishenai/cli@0.0.155 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.