registry / @hypequery/cli / 1.19.0
@hypequery/cli@1.19.0
CLI for scaffolding type-safe ClickHouse analytics, semantic datasets, React manifests, and deployments
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe suspicious primitives are normal CLI functionality and are not install-time. Source inspection found no lifecycle hook, self-dependency chain, covert exfiltration, or agent-control mutation.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs commands such as init, dev, login, or deployment:submit.
Impact
The commands can modify the current project or send a deployment bundle only when explicitly invoked.
Mechanism
User-directed project scaffolding, API loading, and deployment upload.
AI rationale
The suspicious primitives are normal CLI functionality and are not install-time. Source inspection found no lifecycle hook, self-dependency chain, covert exfiltration, or agent-control mutation.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a user-invoked CLI entry point.
- The development command dynamically imports a project module resolved from the current directory.
- The init command can write a project .env file and invoke the selected package manager.
- Deployment submission sends an explicitly supplied or stored bearer token to a configured endpoint.
Evidence against
- package.json has no preinstall, install, postinstall, or other lifecycle hook.
- There is no runtime dependency on @hypequery/cli itself.
- Dynamic loading occurs for explicit dev, deployment, and MCP commands that load the user's API module.
- Network submission is an explicit deployment command and rejects non-HTTPS endpoints except loopback development.
- No credential harvesting, stealth persistence, broad agent-control writes, or destructive behavior was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork
Source & flagged code
5 flaggeddist/commands/init.jsView file
346patternName = generic_password
severity = medium
line = 346
Medium
dist/utils/load-api.jsView file
79? await importOverride(moduleUrl)
L80: : await import(/* @vite-ignore */ moduleUrl);
L81: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/utils/load-api.jsView on unpkg · L7971const extension = path.extname(resolved).toLowerCase();
const isTypeScript = TYPESCRIPT_EXTENSIONS.has(extension);
const moduleUrl = isTypeScript
? await bundleTypeScriptModule(resolved)
: `${pathToFileURL(resolved).href}?t=${Date.now()}`;
try {
const importOverride = globalState.__hypequeryCliImportOverride;
return importOverride
? await importOverride(moduleUrl)
: await import(/* @vite-ignore */ moduleUrl);
Findings
1 High5 Medium6 Low
HighCopied Package Dependency Bridgedist/commands/dev.js
MediumSecret Patterndist/commands/init.js
MediumDynamic Requiredist/utils/load-api.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/utils/load-api.js
Affected versions and remediation
This report applies to @hypequery/cli@1.19.0.
See all versions of @hypequery/cli for other recorded verdicts.
- Review the evidence and your use of @hypequery/cli@1.19.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.