registry / @flydocs/cli / 1.2.12
@flydocs/cli@1.2.12
FlyDocs AI CLI — install, setup, and manage FlyDocs projects
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo install-time execution or concealed malware chain was found. The package nevertheless deploys persistent AI-agent hooks and reads local AI-session/credential-adjacent data after explicit setup, so it warrants a non-blocking warning.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs `flydocs init`/update, then a configured Claude session reaches a Stop event.
Impact
Configured projects can persist hooks that inspect in-scope AI session records and transmit usage metadata to the FlyDocs relay.
Mechanism
Project-local AI-agent hook installation with consent-gated usage reporting.
AI rationale
No install-time execution or concealed malware chain was found. The package nevertheless deploys persistent AI-agent hooks and reads local AI-session/credential-adjacent data after explicit setup, so it warrants a non-blocking warning.
Evidence
package.jsondist/cli.jstemplate/.claude/settings.jsontemplate/.claude/hooks/usage-capture.pytemplate/.claude/hooks/repo_context.py.claude/hooks/usage-capture.py.claude/settings.json.cursor/hooks.json~/.claude/projects~/.codex/sessions~/.cursor/ai-tracking/ai-code-tracking.db~/.claude/.credentials.json~/.flydocs
Network endpoints4
app.flydocs.ai/api/relayus.i.posthog.com/batch/api.anthropic.com/api/oauth/usagecursor.com/api/usage
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- `template/.claude/settings.json` installs Stop hooks into Claude projects.
- `usage-capture.py` detaches `flydocs usage report` on every agent Stop event.
- `dist/cli.js` reads in-scope Claude/Codex/Cursor session data and posts usage records to FlyDocs.
- `dist/cli.js` reads Claude OAuth credentials to query Anthropic plan usage.
Evidence against
- `package.json` has no preinstall/install/postinstall lifecycle hook.
- Agent files are written only by the user-invoked `flydocs init`/update flow.
- Usage reporting requires FlyDocs credentials and a consent decision; machine opt-out is supported.
- Observed endpoints are declared FlyDocs, PostHog, Anthropic, and provider APIs; no hidden payload fetch found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggeddist/cli.jsView file
189});
L190: import { execSync } from "child_process";
L191: import { access as access2, constants } from "fs/promises";
High
8341const { promisify: promisify6 } = await import("util");
L8342: const execAsync = promisify6(execFile6);
L8343: await execAsync("python3", [scriptPath, "pull"], {
High
189});
L190: import { execSync } from "child_process";
L191: import { access as access2, constants } from "fs/promises";
...
L248: const { readFile: readFile31, writeFile: writeFile25, mkdir: mkdir23 } = await import("fs/promises");
L249: const cacheDir = join46(process.env.HOME ?? "~", ".flydocs");
L250: const cachePath2 = join46(cacheDir, "version-check.json");
L251: try {
L252: const cache = JSON.parse(await readFile31(cachePath2, "utf-8"));
L253: const age = Date.now() - new Date(cache.checkedAt ?? 0).getTime();
...
L413: console.log(
L414: ` ${dim("Docs and updates:")} ${pc2.cyan("https://www.flydocs.ai")}`
L415: );
High
Credential Exfiltration
Source combines credential-like environment material and outbound requests; review data flow before blocking.
Findings
7 High5 Medium5 Low
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCredential Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighRuntime Package Installdist/cli.js
HighPayload In Excluded Dirtemplate/.claude/hooks/repo_context.py
MediumDynamic Requiredist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertemplate/.claude/hooks/repo_context.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @flydocs/cli@1.2.12.
See all versions of @flydocs/cli for other recorded verdicts.
- Review the evidence and your use of @flydocs/cli@1.2.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.