registry / @holostaff/cli / 0.11.1
@holostaff/cli@0.11.1
Scan your repo, map your workflows, and create workflow autopilots your users can hand a task to.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged command execution and network transfers belong to the user-run simulation feature: it starts the configured test app, sends observations to the selected model, and reports results to Holostaff. The manifest has no install hooks, and the reviewed source shows no unrelated credential collection or concealed automatic behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs `holostaff simulate`; CI mode additionally requires a configured API key and source ID.
Impact
Simulation page content and results leave the local environment as expected for this feature; no unrelated credential collection or attack behavior was identified.
Mechanism
The simulator sends page observations and screenshots to a configured model endpoint, then uploads simulation results and recordings to the Holostaff API.
AI rationale
The flagged command execution and network transfers belong to the user-run simulation feature: it starts the configured test app, sends observations to the selected model, and reports results to Holostaff. The manifest has no install hooks, and the reviewed source shows no unrelated credential collection or concealed automatic behavior.
Evidence
.holostaff/environment.json.holostaff/simulate.json.holostaff/sim-runsOS temporary directory/holostaff-sim-*.env
Network endpoints3
api.openai.comholostaff-vision-1008066443043.us-central1.run.appSIM_MODEL_BASE_URL (operator-configured)
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hooks; its scripts are development and build commands.
- The CLI dispatches simulation work only for the explicit `simulate` command.
- CI simulation requires a Holostaff API key and source ID before it runs.
- The CI runner uploads simulation run data to the configured Holostaff API.
- The engine sends page observations and screenshots to the selected model endpoint as part of its simulation loop.
Evidence against
- Simulation data, which can include page content, is sent to a model endpoint and run results are uploaded to Holostaff; this is consistent with the stated simulation feature and requires an explicit command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/instrument/openPullRequest.jsView file
18*/
L19: import { execFile } from 'node:child_process';
L20: import { promisify } from 'node:util';
High
Child Process
Package source references child process execution.
dist/instrument/openPullRequest.jsView on unpkg · L18dist/engine/run.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @holostaff/cli@0.8.1
matchedIdentity = npm:QGhvbG9zdGFmZi9jbGk:0.8.1
similarity = 0.650
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/engine/run.jsView on unpkg45() => 'playwright',
L46: () => createRequire(join(process.cwd(), 'package.json')).resolve('playwright'),
L47: () => {
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/engine/run.js
HighChild Processdist/instrument/openPullRequest.js
HighShell
HighCommand Output Exfiltrationdist/commands/simulateCiRunner.js
HighTrigger Reachable Command Output Exfiltrationdist/commands/simulateCiRunner.js
HighSemantic Analysis Limiteddist/deploy/index.js#virtual:normalized:round1
MediumDynamic Requiredist/engine/run.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/deploy/editsKey.js
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @holostaff/cli@0.11.1.
See all versions of @holostaff/cli for other recorded verdicts.
- Review the evidence and your use of @holostaff/cli@0.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.