registry / @caishenai/cli / 0.0.167
@caishenai/cli@0.0.167
Configure Claude Code, Codex, Grok Build and other coding tools for 财神 AI with one command
AI Security Review
scanned 5h ago · by lpm-firewall-aiThe flagged network activity is runtime usage telemetry that the package describes to users, limits to commands and error messages rather than API keys, and allows users to disable. The reviewed process execution, installation, and configuration behavior fits the CLI’s stated purpose; no malicious behavior was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
Telemetry is queued when the CLI runs and is sent during command execution or exit.
Impact
The brand receives the disclosed usage statistics. The inspected code does not show unrelated credential or file collection.
Mechanism
The CLI sends usage events to the brand-configured gateway’s telemetry route; its locale disclosure describes the collected command and error statistics and provides an opt-out.
AI rationale
The flagged network activity is runtime usage telemetry that the package describes to users, limits to commands and error messages rather than API keys, and allows users to disable. The reviewed process execution, installation, and configuration behavior fits the CLI’s stated purpose; no malicious behavior was identified.
Evidence
dist/lib/telemetry.jsdist/lib/gateway-protocol.jsdist/locales/en_US.json
Network endpoints1
Brand-configured gateway: /api/platform/cli/telemetry
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The English locale says usage statistics containing commands and error messages, but not API keys, are sent to the brand and explains how to disable them.
- Telemetry records command events, status, duration, masked errors, and optional details, then sends batches to the telemetry endpoint.
- Telemetry is enabled unless the user sets the telemetry environment variable to 0, false, or off.
Evidence against
- The package description identifies it as a CLI for configuring coding tools; the inspected process execution and tool installation code supports that purpose.
- The reviewed network behavior sends disclosed usage statistics to the brand’s gateway; no unrelated credential collection or destination was identified.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
5 High4 Medium3 Low
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @caishenai/cli@0.0.167.
See all versions of @caishenai/cli for other recorded verdicts.
- Review the evidence and your use of @caishenai/cli@0.0.167 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.