@culvii/cli@0.0.9
Culvii CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThis is suspicious runtime telemetry: the package documents the Segment collection and offers an opt-out, but its crash event includes raw command-line arguments. Those arguments can contain identifying or sensitive values, so the telemetry goes beyond the ordinary anonymous usage fields.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI invocation encounters an unhandled error; telemetry is enabled unless CULVII_TELEMETRY is set to false.
Impact
Command arguments may contain local paths or other identifying or sensitive values that are sent to Segment.
Mechanism
The error handler joins process.argv arguments into a command property and passes that property to the Segment event helper.
AI rationale
This is suspicious runtime telemetry: the package documents the Segment collection and offers an opt-out, but its crash event includes raw command-line arguments. Those arguments can contain identifying or sensitive values, so the telemetry goes beyond the ordinary anonymous usage fields.
Evidence
dist/chunk-KM7ZWOEG.jsdist/index.jsREADME.md~/.culvii/config
Network endpoints1
api.segment.io
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI enables Segment telemetry by default and disables it only when CULVII_TELEMETRY=false.
- The README discloses anonymous crash and usage events to Segment and provides an opt-out.
- The unhandled-error handler includes the full command-line arguments in the CLI_UNHANDLED_ERROR event, which can disclose user-supplied values such as paths or other sensitive arguments.
Evidence against
- Telemetry is disclosed in the README and can be disabled with CULVII_TELEMETRY=false.
- The CLI’s login flow is invoked by a user command and exchanges OAuth tokens with its configured Culvii authentication service.
- No install lifecycle scripts are declared in package.json.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @culvii/cli@0.0.7
matchedIdentity = npm:QGN1bHZpaS9jbGk:0.0.7
similarity = 0.733
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import {a as a$5}from'./chunk-RS5GDTRN.js';import {a as a$4,b as b$1,c as c$1}from'./chunk-KZG5CFSB.js';import {d,f,a as a$1,e,j,n,c,q,r,s,o,k,l}from'./chunk-KM7ZWOEG.js';import {a...
L3: `)){if(c.trim().startsWith("entrypoints:")){a=!0;continue}if(!a)continue;let o=c.match(/^\s+-\s+(.+)$/);o?i.push(re.resolve(t,o[1].trim())):c.trim()&&!c.trim().startsWith("#")&&(a=...
High
1#!/usr/bin/env node
L2: import {a as a$5}from'./chunk-RS5GDTRN.js';import {a as a$4,b as b$1,c as c$1}from'./chunk-KZG5CFSB.js';import {d,f,a as a$1,e,j,n,c,q,r,s,o,k,l}from'./chunk-KM7ZWOEG.js';import {a...
L3: `)){if(c.trim().startsWith("entrypoints:")){a=!0;continue}if(!a)continue;let o=c.match(/^\s+-\s+(.+)$/);o?i.push(re.resolve(t,o[1].trim())):c.trim()&&!c.trim().startsWith("#")&&(a=...
L4: `).filter(f=>f.includes("__culvii_dev_definitions__"));for(let f of v)try{let w=JSON.parse(f);for(let m of w.__culvii_dev_definitions__||[]){let T=m?.definition?.id,I=m?.type&&T?`$...
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/lib/evaluator.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @culvii/cli@0.0.9.
See all versions of @culvii/cli for other recorded verdicts.
- Review the evidence and your use of @culvii/cli@0.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.