registry / @datadog/ai-setup-cli / 2.0.27
@datadog/ai-setup-cli@2.0.27
⚠ Under reviewInteractive tool for Datadog setup
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest and inspected callers do not establish an attack, but the selected @datadog/datadog-api-client dependency could not be inspected. This prevents a clean verdict under the dependency review policy.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The package imports its API client during runtime; the unresolved dependency’s behavior could not be verified.
Impact
The dependency’s behavior and any resulting impact remain unknown.
Mechanism
The package delegates API operations to @datadog/datadog-api-client, whose source was unavailable in the prepared snapshot.
AI rationale
The manifest and inspected callers do not establish an attack, but the selected @datadog/datadog-api-client dependency could not be inspected. This prevents a clean verdict under the dependency review policy.
Evidence
package.jsondist/api/client.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares @datadog/datadog-api-client as a runtime dependency.
- dist/api/client.js imports that dependency for the package’s API client.
- The manifest’s scripts show no preinstall, install, or postinstall hook.
- The dependency source could not be inspected because its prepared package path was unavailable.
Evidence against
- The inspected source does not establish malicious behavior by this dependency.
- The flagged dev-server verifier is part of an interactive telemetry verification flow; it does not establish an attack.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedbin/cli.cjsView file
15// is touched. If the version is too old we exit cleanly with a clear message.
L16: // If the version is fine we hand off to dist/cli.js via dynamic import().
L17: //
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/cli.cjsView on unpkg · L15dist/lib/execute/execute.test.jsView file
1// Unless explicitly stated otherwise all files in this repository are licensed under the MIT License.
L2: // This product includes software developed at Datadog (https://www.datadoghq.com/) Copyright 2026-Present Datadog, Inc.
L3: import test from 'ava';
...
L409: mkdirSync(join(dir, 'web'));
L410: writeFileSync(join(dir, 'web', 'package.json'), '{"name":"web"}\n'); // node app
L411: applyPlan(composeDatadogPlan(['apm']), dir);
...
L564: t.regex(sh, /install_script_agent7\.sh/); // recognized_install_pattern
L565: t.regex(sh, /systemctl enable/); // agent_runs_as_service
L566: t.regex(sh, /\$\{DD_API_KEY\}/); // secrets_not_inlined
...
L637: });
L638: const env = readFileSync(join(dir, '.env'), 'utf-8');
L639: t.regex(env, new RegExp(`DD_API_KEY=${REAL_KEY}`), 'real key written (sanct
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
2 High4 Medium6 Low
HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/lib/gpe/dev-server-verify.js
MediumDynamic Requirebin/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/execute/execute.test.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @datadog/ai-setup-cli@2.0.27.
See all versions of @datadog/ai-setup-cli for other recorded verdicts.
- Review the evidence and your use of @datadog/ai-setup-cli@2.0.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.