registry / @getbrevo/cli / 2.2.0
@getbrevo/cli@2.2.0
Brevo Developer CLI — create, manage apps and OAuth integrations
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe source supports a warning for first-party agent skill installation and automatic updates, rather than a malicious verdict. The scanner's stronger exfiltration claims were not substantiated by the inspected data flows.
Static reason
One or more suspicious static signals were detected.
Trigger
Run brevo skill:cli install, then run a later CLI version with an outdated marked skill and automatic refresh enabled.
Impact
Later package versions can change agent guidance without renewed confirmation.
Mechanism
Copies bundled skill files into the Claude skills directory and replaces outdated marked copies after successful CLI execution.
AI rationale
The source supports a warning for first-party agent skill installation and automatic updates, rather than a malicious verdict. The scanner's stronger exfiltration claims were not substantiated by the inspected data flows.
Evidence
dist/bin/index.js~/.claude/skills/brevo-cli/SKILL.md~/.claude/skills/brevo-cli/.brevo-skill.json
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest has Husky prepare and publishing scripts, with no preinstall, install, postinstall, or runtime self-dependency.
- An explicit skill:cli install command copies the bundled Brevo skill into the user's Claude skills directory.
- Later successful CLI runs automatically overwrite outdated, previously marked Brevo skills without renewed confirmation; environment and command guards can disable refresh.
- The flagged agent configuration location defines AGENTS.md and CLAUDE.md project scaffolding templates used by app scaffolding commands.
Evidence against
- No concrete malware behavior was established in the inspected source.
- Credential requests use Brevo service defaults; the inspected child processes open browsers or run a local OAuth server with inherited output.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/bin/index.jsView file
131`)}function createHelpFormatter(root){return(cmd,helper)=>cmd!==root?import_commander.Help.prototype.formatHelp.call(helper,cmd,helper):formatRootHelp(helper.commandDescription(cmd...
L132: `)}function hasEmittedJson(){return emitted}function buildJsonError(err){let envelope={error:{name:err instanceof Error?err.name:"Error",message:err instanceof Error?err.message:St...
L133: ${messages.APP_LIST_EMPTY}
High
Child Process
Package source references child process execution.
dist/bin/index.jsView on unpkg · L131659</html>
L660: `}function closeServer(server){return new Promise(resolveClose=>{server.close(()=>resolveClose())})}function startScopesWebServer(initialEntries,options={}){let html=renderScopesHt...
L661: `);throw new CliError(messages.APP_START_MISSING_FEATURE(available))}let featureConfig=FEATURES[feature];if(!featureConfig){let available=Object.keys(FEATURES).join(", ");throw new...
...
L663: `),resolve11())}),child.on("error",err=>{process.removeListener("SIGINT",onSignal),process.removeListener("SIGTERM",onSignal),reject(new CliError(messages.APP_START_FAILED(feature,...
L664: Starting ${feature}...`);let childEnv={...process.env,PORT:String(port)};redirectUri&&(childEnv.REDIRECT_URI=redirectUri),await runChildProcess(entryFile,childEnv,feature)});var im...
L665: ${cancelledMessa
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/index.jsView on unpkg · L659Findings
5 High2 Medium5 Low
HighChild Processdist/bin/index.js
HighSame File Env Network Executiondist/bin/index.js
HighCredential Redirect Persistencedist/bin/index.js
HighCommand Output Exfiltrationdist/bin/index.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/index.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @getbrevo/cli@2.2.0.
See all versions of @getbrevo/cli for other recorded verdicts.
- Review the evidence and your use of @getbrevo/cli@2.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.