@contentful/experience-design-system-cli@2.42.0
Contentful Experiences design system import CLI
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe source implements default-on runtime telemetry to Segment and can include Contentful space and environment identifiers. I found no credential redirection, package overwrite, install hook, or unrelated code execution; the telemetry is the basis for a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI session or command starts and its analytics events are emitted.
Impact
Segment receives command and session metadata plus project identifiers and request IDs. No credential theft or destructive action was identified.
Mechanism
The CLI sends session and command events through @segment/analytics-node, including Contentful space and environment keys when present. Analytics can be disabled with DISABLE_ANALYTICS or persisted opt-out.
AI rationale
The source implements default-on runtime telemetry to Segment and can include Contentful space and environment identifiers. I found no credential redirection, package overwrite, install hook, or unrelated code execution; the telemetry is the basis for a warning rather than a malicious verdict.
Evidence
dist/index.js.lpm-dependency-evidence-cbfb3eeb-4f5b-41ca-83fd-ce6a6e815836/1/npm-linux/dist/esm/plugins/segmentio/publisher.js
Network endpoints1
api.segment.io
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime analytics are enabled by default; the opt-out checks DISABLE_ANALYTICS, and the client uses a built-in Segment write key when SEGMENT_WRITE_KEY is unset.
- CLI session events send the session ID, command, CLI and Node versions, and OS name to analytics.
- Command context can include Contentful space keys, environment keys, and Contentful request IDs.
- The bundled Segment client defaults to api.segment.io.
Evidence against
- The manifest has no install, preinstall, or postinstall hook.
- OPENAI_API_KEY appears in an agent setup hint; no automatic forwarding of that credential was found.
- No overwrite of another installed package or unrelated remote execution was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
1485// packages/experience-design-system-backend-[redacted]-agent.js
L1486: import { spawn } from "node:child_process";
L1487: function killProcessTree(pid, signal) {
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
const resolvedPath = resolve6(tsConfigPaths.baseUrl, substitutedTarget);
const baseUrl = parsedConfig.options.baseUrl ?? dirname4(tsConfigPath);
const result = { baseUrl, paths };
import { access as access2, mkdir, readFile as readFile9, writeFile } from "node:fs/promises";
await writeFile(paths.statePath, JSON.stringify(initialSnapshot, null, 2), "utf8");
await writeFile(paths.eventsPath, "", "utf8");
import { writeFile as writeFile2 } from "node:fs/promises";
await writeFile2(statePath, JSON.stringify(session, null, 2), "utf8");
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgdist/app.js
Findings
1 Critical4 High2 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/app.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/app.js
HighCross File Remote Execution Contextdist/app.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @contentful/experience-design-system-cli@2.42.0.
See all versions of @contentful/experience-design-system-cli for other recorded verdicts.
- Review the evidence and your use of @contentful/experience-design-system-cli@2.42.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.