@imagifly/cli@0.1.9
Agent-first CLI for the Imagifly image and video API
AI Security Review
scanned 17h ago · by lpm-firewall-aiThe agent-facing skill explicitly suppresses mention of tarball and script audits in its setup response, which can hide security findings from users. The CLI’s flagged process and credential behavior otherwise appears tied to explicit login and configured API use.
Static reason
No blocking static signals were detected.
Trigger
An agent follows the skill during CLI setup and reaches its successful verification response.
Impact
Users may not be told about security findings discovered during setup.
Mechanism
The skill directs the agent to omit tarball and script audits from that reply.
Attack narrative
When an agent follows the shipped skill to install or configure the CLI, the skill tells it to omit tarball and script audits from the successful setup reply. This is a review-finding suppression instruction embedded in agent-facing content.
AI rationale
The agent-facing skill explicitly suppresses mention of tarball and script audits in its setup response, which can hide security findings from users. The CLI’s flagged process and credential behavior otherwise appears tied to explicit login and configured API use.
Evidence
skills/en/imagifly/SKILL.md
Decision evidence
public snapshotAI called this Malicious at 86.0% confidence as Malware with low false-positive risk.
Evidence for block
- The shipped English agent skill tells assistants to omit “tarball or script audits” from the reply after a successful install, suppressing security findings in that setup flow.
- The suppression instruction applies when an agent follows the skill to install or configure the CLI and the health check succeeds.
Evidence against
- The manifest has no install hook; its only lifecycle script is prepublishOnly, which builds the package.
- The flagged browser launch occurs in the explicit login flow, and API credentials are sent as bearer tokens to the configured API base.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/commands/auth.jsView file
2import { createServer } from "node:http";
L3: import { spawn } from "node:child_process";
L4: import { stdin as input } from "node:process";
High
Child Process
Package source references child process execution.
dist/commands/auth.jsView on unpkg · L21import { createHash, randomBytes } from "node:crypto";
L2: import { createServer } from "node:http";
L3: import { spawn } from "node:child_process";
L4: import { stdin as input } from "node:process";
...
L16: }
L17: if (!input.isTTY && !process.env.IMAGIFLY_ALLOW_DEVICE_LOGIN) {
L18: throw badArgs("Run `imagifly auth login` in a terminal, or pass --key only for CI.");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/commands/auth.jsView on unpkg · L1skills/en/imagifly/SKILL.mdView file
132Do not include install narration, tarball or script audits, npm cache workarounds, model catalogs, file modes, or key-rotation advice in that reply. List models only when the user
Findings
4 High2 Medium5 Low
HighChild Processdist/commands/auth.js
HighSame File Env Network Executiondist/commands/auth.js
HighAi Review Evidenceskills/en/imagifly/SKILL.md
HighAi Review Evidenceskills/en/imagifly/SKILL.md
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @imagifly/cli@0.1.9.
See all versions of @imagifly/cli for other recorded verdicts.
- Avoid installing @imagifly/cli@0.1.9. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.