@chemx/create-chemx@26.9.13-272
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe user-invoked license verification flow sends an existing license key to an unrestricted, operator-configured endpoint. This is a conditional credential exposure risk, so warn without blocking.
Static reason
No blocking static signals were detected.; source closely matched a different package identity; previous stored version diff introduced dangerous source
Trigger
The user invokes the CLI scaffold or init flow and proceeds to license verification.
Impact
Conditional exposure of a supplied or cached license key to an operator-configured recipient.
Mechanism
The code selects CHEMICAL_X_API_URL when set, otherwise the Chemical X service, then posts the normalized key to the selected endpoint.
AI rationale
The user-invoked license verification flow sends an existing license key to an unrestricted, operator-configured endpoint. This is a conditional credential exposure risk, so warn without blocking.
Evidence
cli/license.jscli/scaffold.jscli/index.js
Network endpoints2
chemicalx.xophz.comCHEMICAL_X_API_URL
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI accepts a license key from arguments or its local cache.
- The endpoint can be replaced through CHEMICAL_X_API_URL without a destination allowlist.
- The scaffold flow sends the license key in a POST request to that endpoint.
- The network request is reachable through the package's scaffold command.
Evidence against
- The request occurs during an explicitly invoked scaffolding flow for license verification and starter-kit download.
- The default endpoint is the package's Chemical X service.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcecli/navigator-share.jsView file
2import path from 'node:path';
L3: import { spawnSync } from 'node:child_process';
L4: import {
High
Child Process
Package source references child process execution.
cli/navigator-share.jsView on unpkg · L2cli/terminal.jsView file
10} else if (platform === "win32") {
L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" });
L12: } else {
High
cli/license.jsView file
3import os from 'node:os';
L4: import { spawnSync } from 'node:child_process';
L5: import {
...
L17:
L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
L19: export const URL_LEARN = 'https://chemicalx.xophz.com';
Findings
6 High2 Medium5 Low
HighChild Processcli/navigator-share.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
HighPackage Source Clone Identity Mismatchcli/audit/social-git.js
HighPrevious Version Dangerous Deltacli/build/executor.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @chemx/create-chemx@26.9.13-272.
See all versions of @chemx/create-chemx for other recorded verdicts.
- Review the evidence and your use of @chemx/create-chemx@26.9.13-272 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.