@decocms/blocks-cli@7.50.1
Deco codegen (generate-blocks, generate-schema, generate-invoke) and Fresh-to-TanStack migration tooling
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe destructive recommendation creates a concrete agent capability risk, but it is added by an explicitly invoked migration command rather than an install hook. This supports a warning, not a publish block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the `deco-migrate` command on a project.
Impact
An agent following the rule could delete the project's working tree.
Mechanism
The migration scaffold writes a Cursor rule whose generated content is always applied and includes the destructive recommendation.
AI rationale
The destructive recommendation creates a concrete agent capability risk, but it is added by an explicitly invoked migration command rather than an install hook. This supports a warning, not a publish block.
Evidence
package.jsonscripts/migrate.tsscripts/migrate/phase-scaffold.tsscripts/migrate/templates/cursor-rules.ts.cursor/rules/migration-tooling-policy.mdc
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes `deco-migrate` as a CLI and has no npm install lifecycle hook; its npm scripts are build, test, typecheck, and lint commands.
- The migration invokes the scaffold phase, which writes `.cursor/rules/migration-tooling-policy.mdc`.
- The generated Cursor rule is always applied and advises agents to delete the working tree and rerun after a failed migration.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcescripts/audit-observability-config.test.tsView file
309} {
L310: const { spawnSync } = require("node:child_process") as typeof import(
L311: "node:child_process"
High
Child Process
Package source references child process execution.
scripts/audit-observability-config.test.tsView on unpkg · L309scripts/sync-blocks-to-kv.tsView file
77purgeUrl: val("--purge-url", ""),
L78: purgeToken: val("--purge-token", process.env.PURGE_TOKEN ?? ""),
L79: };
...
L82: function gitChangedFiles(since: string, blocksDir: string): string[] {
L83: const out = execSync(`git diff --name-only ${since} HEAD`, { encoding: "utf-8" });
L84: return changedBlockFiles(out, blocksDir);
...
L87: async function purgeCache(origin: string, token: string, paths: string[]): Promise<void> {
L88: const res = await fetch(new URL("/_cache/purge", origin).toString(), {
L89: method: "POST",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/sync-blocks-to-kv.tsView on unpkg · L77Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltascripts/generate.ts
HighChild Processscripts/audit-observability-config.test.ts
HighShell
HighSame File Env Network Executionscripts/sync-blocks-to-kv.ts
HighRuntime Package Installscripts/generate-invoke.test.ts
HighSemantic Analysis Limitedscripts/audit-observability-config.ts#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @decocms/blocks-cli@7.50.1.
See all versions of @decocms/blocks-cli for other recorded verdicts.
- Review the evidence and your use of @decocms/blocks-cli@7.50.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.