@contentful/experience-design-system-cli@2.41.0
Contentful Experiences design system import CLI
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package appears to perform undisclosed runtime telemetry by default, including Contentful space and environment identifiers and request IDs. This warrants a warning under the telemetry rules, but the reviewed code does not establish credential exfiltration or another malicious attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Invoking CLI commands, including the import workflow; analytics can be disabled with DISABLE_ANALYTICS.
Impact
Segment receives usage data and Contentful space/environment identifiers and request IDs; the reviewed code does not show credential or file-content collection.
Mechanism
The CLI uses the Segment analytics client and emits command/session events, with some Contentful command context included.
AI rationale
The package appears to perform undisclosed runtime telemetry by default, including Contentful space and environment identifiers and request IDs. This warrants a warning under the telemetry rules, but the reviewed code does not establish credential exfiltration or another malicious attack.
Evidence
dist/app.js
Network endpoints4
api.segment.ioapi.github.comapi.contentful.comcontentful.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest has no install or postinstall hook; its scripts are build and development tasks.
- Segment analytics is enabled by default, with DISABLE_ANALYTICS as an environment-variable opt-out.
- The CLI falls back to a bundled Segment write key when SEGMENT_WRITE_KEY is unset.
- Runtime events include command and session data; Contentful command context can add space and environment keys and request IDs.
- The import workflow emits analytics when it runs, rather than during installation.
Evidence against
- The package is a Contentful CLI, and the observed telemetry is tied to its runtime commands.
- The reviewed telemetry code does not show API credentials or file contents being sent.
- The flagged OpenAI API key reference is user-facing login guidance, not evidence of credential redirection.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
5 flaggeddist/index.jsView file
1485// packages/experience-design-system-backend-[redacted]-agent.js
L1486: import { spawn } from "node:child_process";
L1487: function killProcessTree(pid, signal) {
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
const resolvedPath = resolve6(tsConfigPaths.baseUrl, substitutedTarget);
const baseUrl = parsedConfig.options.baseUrl ?? dirname4(tsConfigPath);
const result = { baseUrl, paths };
import { access as access2, mkdir, readFile as readFile9, writeFile } from "node:fs/promises";
await writeFile(paths.statePath, JSON.stringify(initialSnapshot, null, 2), "utf8");
await writeFile(paths.eventsPath, "", "utf8");
import { writeFile as writeFile2 } from "node:fs/promises";
await writeFile2(statePath, JSON.stringify(session, null, 2), "utf8");
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgdist/app.js
Findings
4 High3 Medium5 Low
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/app.js
HighCross File Remote Execution Contextdist/app.js
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @contentful/experience-design-system-cli@2.41.0.
See all versions of @contentful/experience-design-system-cli for other recorded verdicts.
- Review the evidence and your use of @contentful/experience-design-system-cli@2.41.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.