registry / @docusign/cli / 1.3.0-rc
@docusign/cli@1.3.0-rc
The Docusign CLI simplifies the implementation of Docusign Agreement Manager. With this CLI, you can bulk configure Agreement Manager with custom fields and types, map fields to types, provide AI training sets for custom extractions, programmatically test
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe manifest exposes a DocuSign CLI bundle and its prepare hook runs Husky. Inspected source shows DocuSign OAuth credential handling and CLI telemetry, with no evidence of the alleged unrelated credential redirection; the scanner’s Axios matches concern cancellation behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the CLI authentication or an API command.
Impact
No confirmed credential theft, unrelated data transfer, persistence, or destructive behavior was established.
Mechanism
OAuth credentials are exchanged with DocuSign environment endpoints and saved for subsequent CLI use; telemetry records CLI events and account metadata.
AI rationale
The manifest exposes a DocuSign CLI bundle and its prepare hook runs Husky. Inspected source shows DocuSign OAuth credential handling and CLI telemetry, with no evidence of the alleged unrelated credential redirection; the scanner’s Axios matches concern cancellation behavior.
Evidence
package.jsondist/index.mjs
Network endpoints3
account.docusign.com/oauth/authaccount.docusign.com/oauth/tokenaccount.docusign.com/oauth/userinfo
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI bundle and has only a Husky prepare hook; it does not declare an install hook that mutates consumer settings.
- OAuth endpoints are DocuSign services, and the refresh flow sends the refresh token to the configured environment token endpoint.
- Login saves OAuth tokens for later CLI use; the inspected login path does not send them to an unrelated recipient.
- Telemetry is initialized with an environment-specific Mixpanel token; the inspected login telemetry registers account metadata and a hashed user identifier, not OAuth tokens.
- The inspected Axios runtime-operation matches are cancellation and request-abort handling.
Evidence against
- Scanner labels suggest credential redirection, but inspected credential flows target DocuSign OAuth endpoints and no unrelated credential recipient was found.
- The flagged document is a DOCX data template; the available offline artifact analysis says it is not executable. Its limited font inspection does not establish a payload attack.
Behavioral surface
ChildProcess
Source & flagged code
13 flaggeddist/index.mjsView file
6const __filename = fileURLToPath(import.meta.url);
L7: const __dirname = dirname(__filename);
L8: var Zp=Object.defineProperty;var rV=Object.getOwnPropertyDescriptor;var nV=Object.getOwnPropertyNames;var iV=Object.prototype.hasOwnProperty;var a=(t,e)=>Zp(t,"name",{value:e,confi...
L9: `)}displayWidth(e){return xT(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT...
...
L19: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L20: (Did you mean ${n[0]}?)`:""}a(hV,"suggestSimilar");yT.suggestSimilar=hV});var DT=g(qx=>{var gV=k("node:events").EventEmitter,Rx=k("node:child_process"),po=k("node:path"),Jp=k("node...
L21: - specify the name in Command constructor or using .name()`);return
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.mjsView on unpkg · L66Trigger-reachable chain: manifest.main -> dist/index.mjs
L6: const __filename = fileURLToPath(import.meta.url);
L7: const __dirname = dirname(__filename);
L8: var Zp=Object.defineProperty;var rV=Object.getOwnPropertyDescriptor;var nV=Object.getOwnPropertyNames;var iV=Object.prototype.hasOwnProperty;var a=(t,e)=>Zp(t,"name",{value:e,confi...
L9: `)}displayWidth(e){return xT(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT...
...
L19: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L20: (Did you mean ${n[0]}?)`:""}a(hV,"suggestSimilar");yT.suggestSimilar=hV});var DT=g(qx=>{var gV=k("node:events").EventEmitter,Rx=k("node:child_process"),po=k("node:path"),Jp=k("node...
L21: - specify t
Findings
2 Critical9 High4 Medium7 Low
CriticalCredential Exfiltrationdist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCredential Redirect Persistencedist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighObfuscated Payload Loaderdist/index.mjs
HighTrigger Reachable Credential Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighShips High Entropy Blobdist/templates/agreement-manager/files/test/MicroLines Employment Offer Letter.docx
HighPayload In Excluded Dir
Affected versions and remediation
This report applies to @docusign/cli@1.3.0-rc.
See all versions of @docusign/cli for other recorded verdicts.
- Review the evidence and your use of @docusign/cli@1.3.0-rc before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.