@chem-x/create-chemx@26.9.9-786
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe active CLI can forward a user-entered license key to an unrestricted environment-configured endpoint. Since the default endpoint is package-aligned and no covert default recipient is shown, this is a warning-level credential exposure risk.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the scaffold or init command and enters a license key.
Impact
If configured to an unrelated endpoint, the license key may be exposed there; source evidence does not show covert collection or a default unrelated recipient.
Mechanism
The CLI posts the key and device identifier to the endpoint selected by the environment variable or default configuration.
AI rationale
The active CLI can forward a user-entered license key to an unrestricted environment-configured endpoint. Since the default endpoint is package-aligned and no covert default recipient is shown, this is a warning-level credential exposure risk.
Evidence
cli/index.jspackage.json
Network endpoints1
chemicalx.xophz.com
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI accepts a license key from the user and sends it in a request to an endpoint that can be overridden through an environment variable.
- The manifest exposes the CLI as a command-line entrypoint; the request occurs when the user runs scaffold or init.
Evidence against
- The default API endpoint is the package's Chemical X service, and the license key is requested interactively for license verification.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcecli/index.jsView file
6import readline from "node:readline";
L7: import { spawnSync } from "node:child_process";
L8: import { runAudit as executeAstAudit, auditFile } from "./audit.js";
High
34else if (platform === "win32")
L35: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" });
L36: else spawnSync("xdg-open", [url], { stdio: "ignore" });
High
6import readline from "node:readline";
L7: import { spawnSync } from "node:child_process";
L8: import { runAudit as executeAstAudit, auditFile } from "./audit.js";
...
L18:
L19: const API_BASE = process.env.CHEMICAL_X_API_URL || "https://chemicalx.xophz.com";
L20: const URL_LEARN = "https://chemicalx.xophz.com";
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
cli/index.jsView on unpkg · L6Findings
5 High3 Medium5 Low
HighChild Processcli/index.js
HighShellcli/index.js
HighSame File Env Network Executioncli/index.js
HighSandbox Evasion Gated Capabilitycli/index.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @chem-x/create-chemx@26.9.9-786.
See all versions of @chem-x/create-chemx for other recorded verdicts.
- Review the evidence and your use of @chem-x/create-chemx@26.9.9-786 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.