@contrail/cli@3.5.5
VibeIQ's Contrail Platform CLI.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource establishes conditional forwarding of a service session token to an unrestricted locally configured destination. The user-invoked flow and service-aligned defaults support a warning rather than a publication block.
Static reason
One or more suspicious static signals were detected.
Trigger
Run an authenticated command with a custom API gateway in the active local configuration and complete Cognito login.
Impact
An unrelated configured endpoint could receive the service token.
Mechanism
Successful Cognito authentication passes the session token to a POST request whose destination comes from local JSON without validation in the login path.
AI rationale
Source establishes conditional forwarding of a service session token to an unrestricted locally configured destination. The user-invoked flow and service-aligned defaults support a warning rather than a publication block.
Evidence
dist/auth/login.jsdist/helpers/config/config.jsdist/commands/feature-flags/import.jsdist/commands/config/set.jsconfig.jsondefault.json
Network endpoints1
api.vibeiq.com/prod/api
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Login forwards a Cognito session token to the API gateway selected from local configuration.
- Local configuration is parsed without a destination allowlist in the authentication path.
- The token is sent in a POST request to the selected gateway.
- User-invoked commands activate authentication and the token exchange.
- The normal configuration command restricts environment selection to development and production.
Evidence against
- No registry install lifecycle hook or runtime self-dependency was found.
- Default authentication targets VibeIQ; no hidden unrelated recipient was identified.
- Deployment builds and uploads project code through an explicit command.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
12 flaggeddist/helpers/app/metadata-extractor.jsView file
5const os = tslib_1.__importStar(require("os"));
L6: const child_process_1 = require("child_process");
L7: const fs_1 = tslib_1.__importDefault(require("fs"));
High
Child Process
Package source references child process execution.
dist/helpers/app/metadata-extractor.jsView on unpkg · L5node_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources/build/esm/detectors/platform/node/machine-id/execAsync.jsView file
17import * as util from 'util';
L18: export const execAsync = util.promisify(child_process.exec);
L19: //# sourceMappingURL=execAsync.js.map
High
Shell
Package source references shell execution.
node_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources/build/esm/detectors/platform/node/machine-id/execAsync.jsFindings
7 High7 Medium6 Low
HighChild Processdist/helpers/app/metadata-extractor.js
HighShellnode_modules/@opentelemetry/otlp-transformer/node_modules/@opentelemetry/resources/build/esm/detectors/platform/node/machine-id/execAsync.js
HighObfuscated Payload Loadernode_modules/protobufjs/dist/protobuf.js
HighRuntime Package Installdist/helpers/app/app-deployer.js
HighShips High Entropy Blobnode_modules/amazon-cognito-identity-js/dist/amazon-cognito-identity.min.js.gz
HighPayload In Excluded Dirnode_modules/thread-stream/test/dir with spaces/test-package.zip
HighSemantic Analysis Limiteddist/commands/feature-flags/import.js#virtual:normalized:round1
MediumDynamic Requiredist/logger.js
MediumUnsafe Vm Contextnode_modules/pino/benchmarks/utils/wrap-log-level.js
Affected versions and remediation
This report applies to @contrail/cli@3.5.5.
See all versions of @contrail/cli for other recorded verdicts.
- Review the evidence and your use of @contrail/cli@3.5.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.