@culvii/cli@0.1.0
Culvii CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package sends disclosed, opt-out runtime telemetry, but its uncaught-error event includes the complete command line, which may contain identifying or sensitive data. This is a telemetry privacy risk rather than evidence of credential theft or unrelated malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI invocation that reaches the uncaught-error handler; telemetry is enabled unless CULVII_TELEMETRY=false.
Impact
Arguments may contain project identifiers or sensitive values, making the disclosed telemetry more identifying than its anonymous description suggests.
Mechanism
The handler adds the joined process arguments to an error event sent through the Segment analytics client.
AI rationale
The package sends disclosed, opt-out runtime telemetry, but its uncaught-error event includes the complete command line, which may contain identifying or sensitive data. This is a telemetry privacy risk rather than evidence of credential theft or unrelated malicious behavior.
Evidence
dist/chunk-D3YFBXU5.jsdist/index.jsREADME.md
Network endpoints3
api.platform.culvii.comculvii-console.auth.us-east-2.amazoncognito.comSegment (destination named in README; SDK host is not explicit in package source)
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Segment telemetry is enabled by default and can be disabled with CULVII_TELEMETRY=false.
- Telemetry events include the configured user or anonymous ID, tenant ID, and runtime details.
- The CLI sends the full joined command-line arguments with an uncaught-error telemetry event.
- The README discloses crash and usage telemetry and documents the opt-out.
Evidence against
- The package has no lifecycle install scripts; the telemetry runs as CLI runtime behavior.
- The telemetry is disclosed and has an opt-out, but raw command arguments can contain identifying or sensitive values.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @culvii/cli@0.0.7
matchedIdentity = npm:QGN1bHZpaS9jbGk:0.0.7
similarity = 0.733
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import {a as a$5}from'./chunk-RS5GDTRN.js';import {a as a$4,b as b$1,c as c$1}from'./chunk-KZG5CFSB.js';import {d,f,a as a$1,e,j as j$1,n,c,q,r,s,o,k,l}from'./chunk-D3YFBXU5.js';im...
L3: `);}async function l(){let f=await je(e),w;try{w=await Me(f);}catch(g){s(x,`Evaluation failed, skipping this sync cycle: ${g.message}`,"error");return}let m=new Map,T=new Set,I=new...
High
1#!/usr/bin/env node
L2: import {a as a$5}from'./chunk-RS5GDTRN.js';import {a as a$4,b as b$1,c as c$1}from'./chunk-KZG5CFSB.js';import {d,f,a as a$1,e,j as j$1,n,c,q,r,s,o,k,l}from'./chunk-D3YFBXU5.js';im...
L3: `);}async function l(){let f=await je(e),w;try{w=await Me(f);}catch(g){s(x,`Evaluation failed, skipping this sync cycle: ${g.message}`,"error");return}let m=new Map,T=new Set,I=new...
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/lib/evaluator.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @culvii/cli@0.1.0.
See all versions of @culvii/cli for other recorded verdicts.
- Review the evidence and your use of @culvii/cli@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.