@decocms/blocks-cli@7.62.1
Deco codegen (generate-blocks, generate-schema, generate-invoke) and Fresh-to-TanStack migration tooling
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the flagged network, process, and audit behaviors are tied to explicit CLI use or tests. However, the migration’s persistent Cursor rule advises broad deletion after failure, creating a concrete residual risk of destructive agent behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the migration CLI in a site that uses the generated Cursor rule.
Impact
An agent following that advice could delete site files. The package itself does not perform that deletion through this rule.
Mechanism
The migration writes a Cursor rule file whose persistent instructions include deleting the working tree and rerunning after a migration failure.
AI rationale
The package has no install lifecycle hook, and the flagged network, process, and audit behaviors are tied to explicit CLI use or tests. However, the migration’s persistent Cursor rule advises broad deletion after failure, creating a concrete residual risk of destructive agent behavior.
Evidence
scripts/migrate/phase-scaffold.tsscripts/migrate/templates/cursor-rules.ts
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes command-line tools and has no install lifecycle hook; the migration command is user-invoked.
- The migration scaffold writes a Cursor rule file into the migrated site.
- The generated rule is always applied and advises deleting the working tree after a failed migration.
- The migration CLI’s bootstrap runs dependency installation and generators as part of an explicit migration action.
- The KV sync command defaults to dry-run and requires --write before sending data to Cloudflare KV.
- The flagged child-process test runs the observability auditor against a temporary test directory; the auditor describes itself as read-only.
- The flagged generate-invoke test creates fixtures in temporary directories and runs the generator against them.
- The new secret-audit script is a read-only scanner for hardcoded credentials and client-side crypto imports.
Evidence against
- No install hook invokes the migration or changes agent settings during package installation.
- The Cursor rule is created by the explicit migration command, but its always-applied deletion advice can influence later agent behavior.
Source & flagged code
5 flagged · loading sourcescripts/audit-observability-config.test.tsView file
309} {
L310: const { spawnSync } = require("node:child_process") as typeof import(
L311: "node:child_process"
High
Child Process
Package source references child process execution.
scripts/audit-observability-config.test.tsView on unpkg · L309scripts/sync-blocks-to-kv.tsView file
77purgeUrl: val("--purge-url", ""),
L78: purgeToken: val("--purge-token", process.env.PURGE_TOKEN ?? ""),
L79: };
...
L82: function gitChangedFiles(since: string, blocksDir: string): string[] {
L83: const out = execSync(`git diff --name-only ${since} HEAD`, { encoding: "utf-8" });
L84: return changedBlockFiles(out, blocksDir);
...
L87: async function purgeCache(origin: string, token: string, paths: string[]): Promise<void> {
L88: const res = await fetch(new URL("/_cache/purge", origin).toString(), {
L89: method: "POST",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/sync-blocks-to-kv.tsView on unpkg · L77Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltascripts/audit-secrets.ts
HighChild Processscripts/audit-observability-config.test.ts
HighShell
HighSame File Env Network Executionscripts/sync-blocks-to-kv.ts
HighRuntime Package Installscripts/generate-invoke.test.ts
HighSemantic Analysis Limitedscripts/audit-observability-config.ts#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @decocms/blocks-cli@7.62.1.
See all versions of @decocms/blocks-cli for other recorded verdicts.
- Review the evidence and your use of @decocms/blocks-cli@7.62.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.