registry / @contentful/experience-design-system-cli / 2.38.0
@contentful/experience-design-system-cli@2.38.0
Contentful Experiences design system import CLI
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe flagged agent-related code treats AGENTS.md as project documentation and extracts component relationships; it does not write agent configuration. The manifest shows no install lifecycle hook, and the runtime excerpts format debug logs, so the scanner signals do not establish an attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI analysis flow that processes project files.
Impact
No unauthorized access, data disclosure, or harmful configuration change was established.
Mechanism
The legacy code reads AGENTS.md text to infer component relationships; the cited runtime code formats debug logs.
AI rationale
The flagged agent-related code treats AGENTS.md as project documentation and extracts component relationships; it does not write agent configuration. The manifest shows no install lifecycle hook, and the runtime excerpts format debug logs, so the scanner signals do not establish an attack.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes CLI entry points and lists development scripts; it shows no install lifecycle hook.
- The legacy code reads project AGENTS.md files and uses nearby component paths to identify documentation relevant to composition analysis.
- It extracts component names from documentation lines containing composition terms and records them as documentation-derived edges.
- The cited runtime code formats debug-log text in both entry files.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
553// packages/experience-design-system-cli/src/tui/import/spawn-v1-import.ts
L554: import { spawn as spawn3 } from "node:child_process";
L555: function buildArgs(options) {
High
18Cross-file remote execution chain: dist/index.js spawns legacy/dist/src/index.js; helper contains network access plus dynamic code execution.
L18: while (true) {
L19: const manifestPath = join(dir, "package.json");
L20: if (existsSync(manifestPath)) {
L21: const pkg2 = JSON.parse(readFileSync(manifestPath, "utf8"));
L22: if (pkg2.name === packageName) found = dir;
...
L115: try {
L116: const response = await fetch(TAGS_URL);
L117: if (!response.ok) return { status: "error" };
...
L142: import { useEffect, useState } from "react";
L143: import { useStdout } from "ink";
L144: function readColumns(stdout) {
...
L454: function expandHome(value) {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.jsView on unpkg · L18legacy/dist/src/index.jsView file
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltalegacy/dist/src/index.js
HighChild Processdist/index.js
HighCross File Remote Execution Contextdist/index.js
HighSemantic Analysis Limitedlegacy/dist/src/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @contentful/experience-design-system-cli@2.38.0.
See all versions of @contentful/experience-design-system-cli for other recorded verdicts.
- Review the evidence and your use of @contentful/experience-design-system-cli@2.38.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.