registry / @intellicore/cli / 0.7.6

@intellicore/cli@0.7.6

IntelliCore CLI — agentflow를 터미널에서 실행하는 AI 개발 도구

AI Security Review

scanned 4h ago · by lpm-firewall-ai

The interactive AI development CLI accepts agent-flow tool calls that can execute shell commands and modify project files. This is an explicit runtime capability, not install-time behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `intellicode` and connects to a configured agent-flow service; user can also invoke `intellicode update`.

Impact

A configured or compromised agent-flow service could cause local project command execution; broad approval can permit commands outside the limited denylist.

Mechanism

Remote agent-directed shell execution and project file mutation.

Rationale

This is a dangerous dual-use AI coding-agent capability with insufficiently comprehensive command gating, warranting a warning. It is not concrete malicious package behavior because activation is user-driven and no covert exfiltration, persistence, or install-time execution was found.

Evidence

package.jsondist/cli.jsdist/chunk-7TGRTTMB.jsdist/chunk-PPPSFEJE.jsdist/update-EVILX2JM.jsdist/init-QR2YUWA2.js~/.intellicorerc./.intellicode/

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/chunk-7TGRTTMB.js` registers an agent `shell_exec` tool that runs commands through `sh -c`.
Remote agent-flow responses can invoke registered tools after the user starts the CLI.
Command approval only covers a short dangerous-pattern list; other shell commands proceed.
`dist/update-EVILX2JM.js` runs global npm installation and git/npm rebuild commands when the user invokes `update`.

Evidence against

`package.json` has only `prepublishOnly`; no install-time lifecycle hook.
Network API calls use a user-supplied configured API URL and stored login credentials.
No source evidence of credential harvesting, hidden exfiltration, payload download-and-execute, or foreign AI-agent configuration writes.
`init` writes only the package-owned `.intellicode/` project directory after explicit invocation.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 44 file(s), 371 KB of source, external domains: get.docker.com, github.com, sh.rustup.rs

Source & flagged code

4 flagged

dist/update-EVILX2JM.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2import "./chunk-7OCVIDC7.js";

4// src/features/update/update.ts

5import { execSync } from "child_process";

6import chalk from "chalk";

High

Child Process

Package source references child process execution.

dist/update-EVILX2JM.jsView on unpkg · L4

7async function updateCommand() {

8 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uD655\uC778 \uC911..."));

9 try {

10 const latest = execSync("npm view @intellicore/cli version 2>/dev/null", {

11 encoding: "utf-8"

12 }).trim();

13 const current = true ? "0.7.6" : "0.1.0";

14 if (latest === current) {

15 console.log(chalk.green(` \u2713 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4 (v${current})`));

16 return;

17 }

18 console.log(chalk.yellow(` \uD604\uC7AC: v${current} \u2192 \uCD5C\uC2E0: v${latest}`));

19 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uC911..."));

20 execSync("npm install -g @intellicore/cli@latest", {

21 encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/update-EVILX2JM.jsView on unpkg · L19

22 stdio: "pipe"

23 });

24 console.log(chalk.green(` \u2713 v${latest}\uB85C \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC`));

25 console.log(chalk.dim(" \uBCC0\uACBD\uC0AC\uD56D: https://github.com/SolomonJongmin/intellicore-cli/releases"));

26 } catch (err) {

27 try {

28 console.log(chalk.dim(" npm \uD328\uD0A4\uC9C0 \uBBF8\uB4F1\uB85D \u2014 git pull\uB85C \uC5C5\uB370\uC774\uD2B8 \uC2DC\uB3C4..."));

29 const output = execSync("git pull origin main", {

30 encoding: "utf-8",

31 cwd: getInstallDir()

32 });

33 console.log(chalk.dim(` ${output.trim()}`));

34 execSync("npm install && npm run build", {

35 encoding: "utf-8",

36 cwd: getInstallDir(),

37 stdio: "pipe"

38 });

39 console.log(chalk.green(" \u2713 \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC (git pull + rebuild)"));

dist/knowledge-VZYH555V.jsView file

Lines 60-100javascript

60 if (tokens > MAX_CHUNK_TOKENS) {

61 chunks.push(...splitChunk(path, lines, start, end));

62 } else {

63 chunks.push({

64 id: createHash("md5").update(`${path}:${start}`).

dist/chunk-7TGRTTMB.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @intellicore/cli@0.5.0 matchedIdentity = npm:QGludGVsbGljb3JlL2NsaQ:0.5.0 similarity = 0.558 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-7TGRTTMB.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/update-EVILX2JM.jsView file

4// src/features/update/update.ts L5: import { execSync } from "child_process"; L6: import chalk from "chalk";

High

Child Process

Package source references child process execution.

dist/update-EVILX2JM.jsView on unpkg · L4

19console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uC911...")); L20: execSync("npm install -g @intellicore/cli@latest", { L21: encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/update-EVILX2JM.jsView on unpkg · L19

dist/knowledge-VZYH555V.jsView file

80/^(?:export\s+)?const\s+\w+\s*=\s*(?:async\s*)?\(/, L81: /^(?:public|private|protected)\s+(?:static\s+)?(?:async\s+)?\w+\s*\(/, L82: /^def\s+\w+/, ... L176: try { L177: const data = JSON.parse(readFileSync(storePath, "utf-8")); L178: this.chunks = data.chunks;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/knowledge-VZYH555V.jsView on unpkg · L80

dist/chunk-7TGRTTMB.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-7TGRTTMB.jsView on unpkg

Findings

1 Critical3 High3 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/chunk-7TGRTTMB.js

HighChild Processdist/update-EVILX2JM.js

HighShell

HighRuntime Package Installdist/update-EVILX2JM.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/knowledge-VZYH555V.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/update-EVILX2JM.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2import "./chunk-7OCVIDC7.js";

4// src/features/update/update.ts

5import { execSync } from "child_process";

6import chalk from "chalk";

High

Child Process

Package source references child process execution.

dist/update-EVILX2JM.jsView on unpkg · L4

7async function updateCommand() {

8 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uD655\uC778 \uC911..."));

9 try {

10 const latest = execSync("npm view @intellicore/cli version 2>/dev/null", {

11 encoding: "utf-8"

12 }).trim();

13 const current = true ? "0.7.6" : "0.1.0";

14 if (latest === current) {

15 console.log(chalk.green(` \u2713 \uC774\uBBF8 \uCD5C\uC2E0 \uBC84\uC804\uC785\uB2C8\uB2E4 (v${current})`));

16 return;

17 }

18 console.log(chalk.yellow(` \uD604\uC7AC: v${current} \u2192 \uCD5C\uC2E0: v${latest}`));

19 console.log(chalk.blue(" \u280B \uC5C5\uB370\uC774\uD2B8 \uC911..."));

20 execSync("npm install -g @intellicore/cli@latest", {

21 encoding: "utf-8",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/update-EVILX2JM.jsView on unpkg · L19

22 stdio: "pipe"

23 });

24 console.log(chalk.green(` \u2713 v${latest}\uB85C \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC`));

25 console.log(chalk.dim(" \uBCC0\uACBD\uC0AC\uD56D: https://github.com/SolomonJongmin/intellicore-cli/releases"));

26 } catch (err) {

27 try {

28 console.log(chalk.dim(" npm \uD328\uD0A4\uC9C0 \uBBF8\uB4F1\uB85D \u2014 git pull\uB85C \uC5C5\uB370\uC774\uD2B8 \uC2DC\uB3C4..."));

29 const output = execSync("git pull origin main", {

30 encoding: "utf-8",

31 cwd: getInstallDir()

32 });

33 console.log(chalk.dim(` ${output.trim()}`));

34 execSync("npm install && npm run build", {

35 encoding: "utf-8",

36 cwd: getInstallDir(),

37 stdio: "pipe"

38 });

39 console.log(chalk.green(" \u2713 \uC5C5\uB370\uC774\uD2B8 \uC644\uB8CC (git pull + rebuild)"));

dist/knowledge-VZYH555V.jsView file

Lines 60-100javascript

60 if (tokens > MAX_CHUNK_TOKENS) {

61 chunks.push(...splitChunk(path, lines, start, end));

62 } else {

63 chunks.push({

64 id: createHash("md5").update(`${path}:${start}`).

dist/chunk-7TGRTTMB.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-7TGRTTMB.jsView on unpkg