@decocms/blocks-cli@7.78.1
Deco codegen (generate-blocks, generate-schema, generate-invoke) and Fresh-to-TanStack migration tooling
AI Security Review
scanned 5d ago · by lpm-firewall-aiMark this suspicious because an explicit migration writes persistent agent instructions that recommend destructive recovery, and cleanup can remove project agent guidance. The behavior is user-triggered and no automatic install-time attack was found, so warn rather than block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A site operator runs the migration command without dry-run mode.
Impact
A later agent could follow the generated guidance and delete the project working tree. The package itself does not execute that instruction.
Mechanism
The migration writes a project Cursor rule that is always applied and tells agents to delete the working tree after a failed migration; cleanup also removes src/AGENTS.md when present.
AI rationale
Mark this suspicious because an explicit migration writes persistent agent instructions that recommend destructive recovery, and cleanup can remove project agent guidance. The behavior is user-triggered and no automatic install-time attack was found, so warn rather than block.
Evidence
scripts/migrate.tsscripts/migrate/phase-scaffold.tsscripts/migrate/phase-cleanup.tsscripts/migrate/templates/cursor-rules.ts.cursor/rules/migration-tooling-policy.mdcsrc/AGENTS.md
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a migration command and lists only build, test, typecheck, and lint scripts; it declares no install lifecycle hook or runtime dependency on itself.
- The migration runs its scaffold and cleanup phases when invoked, and runs bootstrap and provisioning only outside dry-run mode.
- Migration cleanup names src/AGENTS.md for removal and previews deletion in dry-run mode; scaffolding writes a project Cursor rule.
- The generated Cursor rule is always applied and tells agents to delete the working tree after a failed migration.
- The observability auditor reads wrangler.jsonc and reports findings without writing the file.
- Generator subprocess use is in the orchestrator, while the flagged subprocess calls in test files exercise generators against fixtures.
Evidence against
- The package does not perform the agent configuration changes through an install hook; they are part of the explicitly invoked migration command.
- The source supports normal migration and code generation behavior, with no inspected evidence of credential theft, stealth persistence, or a package-controlled payload.
Source & flagged code
5 flagged · loading sourcescripts/generate-workspaces.test.tsView file
1// @vitest-environment node
L2: import { spawnSync } from "node:child_process";
L3: import fs from "node:fs";
High
Child Process
Package source references child process execution.
scripts/generate-workspaces.test.tsView on unpkg · L1scripts/migrate.ts#virtual:normalized:round1View file
94// Skipped in dry-run, when --no-compile is passed, or when bootstrap
L95: // didn"t install dependencies (handled inside `compile`).\n if (!opts.noCompile) {\n const compileResult = compile(ctx, {\n strict: opts.strict,\n withBuild:...
L96: * (`deco-kv-<site>` — never shared, since `index:live` is one key per namespace
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/migrate.ts#virtual:normalized:round1View on unpkg · L94Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltascripts/generate.ts
HighChild Processscripts/generate-workspaces.test.ts
HighShell
HighSame File Env Network Executionscripts/migrate.ts#virtual:normalized:round1
HighRuntime Package Installscripts/generate-invoke.test.ts
HighSemantic Analysis Limitedscripts/audit-observability-config.ts#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @decocms/blocks-cli@7.78.1.
See all versions of @decocms/blocks-cli for other recorded verdicts.
- Review the evidence and your use of @decocms/blocks-cli@7.78.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.