@datadog/ai-setup-cli@2.0.31
Interactive tool for Datadog setup
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package performs undisclosed, on-by-default runtime telemetry to Datadog services, and signup events can include the user's email. The first-party destinations and package purpose make this a warning-level telemetry concern rather than evidence of malicious exfiltration.
Static reason
No blocking static signals were detected.
Trigger
Automatically on CLI startup and during signup or onboarding events.
Impact
Shares usage data and potentially an account email with Datadog without a documented telemetry opt-out found in the reviewed package files.
Mechanism
The CLI posts telemetry to Datadog's site-specific logs intake and onboarding services; signup attributes can include signupEmail.
AI rationale
The package performs undisclosed, on-by-default runtime telemetry to Datadog services, and signup events can include the user's email. The first-party destinations and package purpose make this a warning-level telemetry concern rather than evidence of malicious exfiltration.
Evidence
dist/cli.jsdist/utils/send-log.jsdist/utils/onboarding-events-schema.jsdist/utils/send-to-intake.jsREADME.md
Network endpoints2
http-intake.logs.${site}api.${site}
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Each successful CLI start emits an app_enter telemetry event automatically.
- Each telemetry event is sent to both logs intake and the onboarding event endpoint.
- Signup event attributes can include the user's email as signupEmail.
- The logs intake host is derived from the selected Datadog site.
- Headless documentation describes source upload and command execution authorization but does not mention telemetry.
Evidence against
- Telemetry is routed to Datadog site-specific services, consistent with this setup CLI's purpose.
- package.json has no install lifecycle scripts.
- Headless mode documents authorization for source upload and automatic command execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedbin/cli.cjsView file
15// is touched. If the version is too old we exit cleanly with a clear message.
L16: // If the version is fine we hand off to dist/cli.js via dynamic import().
L17: //
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/cli.cjsView on unpkg · L15dist/lib/execute/execute.test.jsView file
1// Unless explicitly stated otherwise all files in this repository are licensed under the MIT License.
L2: // This product includes software developed at Datadog (https://www.datadoghq.com/) Copyright 2026-Present Datadog, Inc.
L3: import test from 'ava';
...
L409: mkdirSync(join(dir, 'web'));
L410: writeFileSync(join(dir, 'web', 'package.json'), '{"name":"web"}\n'); // node app
L411: applyPlan(composeDatadogPlan(['apm']), dir);
...
L564: t.regex(sh, /install_script_agent7\.sh/); // recognized_install_pattern
L565: t.regex(sh, /systemctl enable/); // agent_runs_as_service
L566: t.regex(sh, /\$\{DD_API_KEY\}/); // secrets_not_inlined
...
L637: });
L638: const env = readFileSync(join(dir, '.env'), 'utf-8');
L639: t.regex(env, new RegExp(`DD_API_KEY=${REAL_KEY}`), 'real key written (sanct
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
1 High7 Medium4 Low
HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/execute/execute.test.js
MediumAi Review Evidencedist/cli.js
MediumAi Review Evidencedist/utils/send-log.js
MediumAi Review Evidencedist/utils/onboarding-events-schema.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @datadog/ai-setup-cli@2.0.31.
See all versions of @datadog/ai-setup-cli for other recorded verdicts.
- Review the evidence and your use of @datadog/ai-setup-cli@2.0.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.