@chemx/starter-kit@26.9.9-786
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe CLI forwards a license key to an operator-configurable endpoint without enforcing a destination allowlist. The explicit command trigger and package-aligned default support a warning for conditional credential exposure, not a block.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit invocation of a scaffold or init CLI command that obtains a license key.
Impact
A misconfigured or untrusted endpoint can receive the license key; source does not establish covert theft or malicious default routing.
Mechanism
The CLI selects CHEMICAL_X_API_URL when set and posts the license key and device ID to its download endpoint without validating the destination.
AI rationale
The CLI forwards a license key to an operator-configurable endpoint without enforcing a destination allowlist. The explicit command trigger and package-aligned default support a warning for conditional credential exposure, not a block.
Evidence
cli/index.jspackage.json
Network endpoints1
chemicalx.xophz.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI accepts a cached or command-line license key and sends it with a device ID to an endpoint configurable through CHEMICAL_X_API_URL, without a destination allowlist.
- The package has no install lifecycle hooks; the credential request is reached through explicit scaffold or init CLI commands.
Evidence against
- The default API destination is chemicalx.xophz.com, matching the package's stated service.
- License verification and starter-kit download are consistent with the CLI's scaffold and init functions.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcecli/index.jsView file
6import readline from "node:readline";
L7: import { spawnSync } from "node:child_process";
L8: import { runAudit as executeAstAudit, auditFile } from "./audit.js";
High
34else if (platform === "win32")
L35: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore" });
L36: else spawnSync("xdg-open", [url], { stdio: "ignore" });
High
6import readline from "node:readline";
L7: import { spawnSync } from "node:child_process";
L8: import { runAudit as executeAstAudit, auditFile } from "./audit.js";
...
L18:
L19: const API_BASE = process.env.CHEMICAL_X_API_URL || "https://chemicalx.xophz.com";
L20: const URL_LEARN = "https://chemicalx.xophz.com";
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
cli/index.jsView on unpkg · L6Findings
5 High3 Medium5 Low
HighChild Processcli/index.js
HighShellcli/index.js
HighSame File Env Network Executioncli/index.js
HighSandbox Evasion Gated Capabilitycli/index.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @chemx/starter-kit@26.9.9-786.
See all versions of @chemx/starter-kit for other recorded verdicts.
- Review the evidence and your use of @chemx/starter-kit@26.9.9-786 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.