Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@docana/cli@0.2.0: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 11 low-signal pattern(s) reviewed.

View on npm All versions

registry / @docana/cli / 0.2.0

@docana/cli@0.2.0

Docana CLI — manage agents, evals, documents, and conversations from your terminal

AI Security Review

scanned 22h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime network and credential storage implement explicit Docana CLI login/API operations.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs docana commands such as login, push, or agents run.

Impact

User-selected agent data and credentials are sent only to the configured API endpoint.

Mechanism

Interactive OAuth/API-key configuration and authenticated Docana API requests.

Rationale

Static hints are explained by normal CLI networking, OAuth, filesystem configuration, and agent-evaluation terminology. Source shows no stealth execution, exfiltration, payload reconstruction, or install-time mutation.

Evidence

package.jsonbin/docana.jsdist/index.jsdist/config.jsdist/auth.jsdist/api.jsdist/oauth.js~/.docana/config.json

Network endpoints1

localhost:3000

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Evidence for block

Evidence against

package.json has only prepublishOnly; no install lifecycle hook.
bin/docana.js only imports the CLI entrypoint.
dist/index.js registers explicit CLI commands; login is interactive.
dist/config.js writes only ~/.docana/config.json with 0600 permissions.
dist/api.js sends user-invoked API requests to configured Docana URL.
No child-process, eval/Function/vm, dynamic loader, or foreign agent-config writes found.

Behavioral surface

Source

CryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 208 KB of source, external domains: 127.0.0.1, anima-tst.virtual360.io, platform.docana.com

Source & flagged code

3 flagged · loading source

dist/index.jsView file

52const config = getConfig(); L53: const apiUrl = await p.text({ L54: message: "Docana API URL", L55: initialValue: config.apiUrl, L56: placeholder: "http://localhost:3000", L57: }); ... L144: const config = getConfig(); L145: const authDescription = process.env.DOCANA_API_KEY L146: ? pc.green("API key (from DOCANA_API_KEY env)") ... L202: .action(async (options) => { L203: const currentWorkingDirectory = process.cwd(); L204: const existingManifestPath = findManifestPath(currentWorkingDirectory);

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L52

1872p.note(`Matched ${evalSpecFilePaths.length} eval spec file(s) from: ${options.evalSpec}`, "Evaluation Batch"); L1873: s.start(`Running ${evalSpecFilePaths.length} eval(s) in parallel...`); L1874: s.stop(pc.green("✔ Parallel evaluation batch started"));

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L1872

52const config = getConfig(); L53: const apiUrl = await p.text({ L54: message: "Docana API URL", L55: initialValue: config.apiUrl, L56: placeholder: "http://localhost:3000", L57: }); ... L144: const config = getConfig(); L145: const authDescription = process.env.DOCANA_API_KEY L146: ? pc.green("API key (from DOCANA_API_KEY env)") ... L202: .action(async (options) => { L203: const currentWorkingDirectory = process.cwd(); L204: const existingManifestPath = findManifestPath(currentWorkingDirectory);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L52

Findings

1 High3 Medium7 Low

HighObfuscated Payload Loaderdist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/index.js

LowWeak Cryptodist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

96%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Maintainerseduardolundgren, bastotecdocana

Version0.6.0

PublishedJul 20, 2026

LicenseMIT

Dependencies14

Integrityverified

Package size49.0 KB

Files16

Keywordsdocanacliagentsai

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.jsbin → docana

Runtimenode >=20

Artifact213 KB · 16 files1 signature(s)

Install lifecycleprepublishOnly

Behavioral surface

CryptoEnvironmentVarsEvalFilesystemNetworkHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

3 flagged

dist/index.jsView file

Lines 32-72javascript

32 if (topic === "ai") {

33 console.log(AI_AGENT_HELP_MARKDOWN);

34 return;

35 }

36 if (!topic) {

37 program.outputHelp();

38 return;

39 }

40 const matchingCommand = program.commands.find((commandItem) => commandItem.name() === topic || commandItem.aliases().includes(topic));

41 if (!matchingCommand) {

42 p.log.error(`Unknown help topic: ${topic}`);

43 process.exit(1);

44 }

45 matchingCommand.outputHelp();

46});

47program

48 .command("login")

49 .description("Log in with the browser or configure an API key")

50 .action(async () => {

51 p.intro(pc.bgBlue(pc.white(" Docana Agent CLI Setup ")));

52 const config = getConfig();

53 const apiUrl = await p.text({

54 message: "Docana API URL",

55 initialValue: config.apiUrl,

56 placeholder: "http://localhost:3000",

57 });

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L52

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L52

58 if (p.isCancel(apiUrl)) {

59 p.cancel("Setup cancelled.");

60 process.exit(0);

61 }

62 const authMethod = await p.select({

63 message: "How do you want to authenticate?",

64 options: [

65 { value: "oauth", label: "Log in with browser (recommended)" },

66 { value: "apiKey", label: "Paste an API key" },

67 ],

68 });

69 if (p.isCancel(authMethod)) {

70 p.cancel("Setup cancelled.");

71 process.exit(0);

72 }

Lines 1852-1892javascript

1852 : config.applicationId;

1853 if (!appId) {

1854 p.log.error("Application ID is required. Pass -a <id> or run `docana login` to set a default.");

1855 process.exit(1);

1856 }

1857 const { spec, id }

=

readSpecFile

(file);

1858 let evalSpecFilePaths = [];

1859 try {

1860 evalSpecFilePaths = resolveEvalSpecFilePaths(options.evalSpec);

1861 }

1862 catch (error) {

1863 p.log.error(error.message);

1864 process.exit(1);

1865 }

1866 const s = p.spinner();

1867 try {

1868 s.start("Importing agent spec to Docana...");

1869 const importResult = await api.importAgent(appId, spec, id);

1870 const agentId = importResult.rootAgentId;

1871 s.stop(pc.green(`✔ Agent imported (ID: ${agentId})`));

1872 p.note(`Matched ${evalSpecFilePaths.length} eval spec file(s) from: ${options.evalSpec}`, "Evaluation Batch");

1873 s.start(`Running ${evalSpecFilePaths.length} eval(s) in parallel...`);

1874 s.stop(pc.green("✔ Parallel evaluation batch started"));

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L1872

1875 const evaluationBatchStartTime = Date.now();

1876 const progressState = new Array(evalSpecFilePaths.length).fill("");

1877 const renderProgress = () => {

1878 logUpdate(progressState.join("\n"));

1879 };

1880 const renderInterval = setInterval(renderProgress, 100);

1881 const evaluationBatchResults = await Promise.allSettled(evalSpecFilePaths.map((evalSpecFilePath, evalIndex) => runSingleEvalSpecInBatch({

1882 agentId,

1883 appId,

1884 evalIndex,

1885 evalSpecFilePath,

1886 totalEvals: evalSpecFilePaths.length,

1887 onProgress: (msg) => {

1888 progressState[evalIndex] = msg;

1889 },

1890 })));

1891 clearInterval(renderInterval);

1892 logUpdate.clear();