registry / @intutic/cli / 1.10.0
@intutic/cli@1.10.0
Intutic CLI — sync daemon, harness detection, and workspace management
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
3 flaggeddist/lib/envInjector.jsView file
7* Platform support:
L8: * macOS: launchctl setenv <KEY> <VALUE>
L9: * Linux: ~/.bashrc append (user-level; system /etc/environment requires sudo)
...
L14: */
L15: import { execSync } from 'node:child_process';
L16: import fs from 'node:fs';
...
L46: function linuxInjectUser(key, value) {
L47: const rcFile = path.join(os.homedir(), '.bashrc');
L48: const marker = `# intutic-env-${key}`;
...
L81: *
L82: * @param proxyUrl - The Intutic proxy URL (e.g. https://proxy.acme.intutic.ai)
L83: * @returns InjectionResult describing what was done
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/lib/envInjector.jsView on unpkg · L7dist/commands/install-daemon.jsView file
17import * as os from 'node:os';
L18: import { execFileSync } from 'node:child_process';
L19: import { createLogger } from '@intutic/logger';
...
L34: }
L35: export function getPaths(system, isMcp, platform = process.platform) {
L36: const label = isMcp ? 'ai.intutic.mcp-daemon' : 'ai.intutic.sync-daemon';
...
L38: if (platform === 'darwin') {
L39: const dir = system ? '/Library/LaunchDaemons' : path.join(os.homedir(), 'Library', 'LaunchAgents');
L40: const plistPath = path.join(dir, `${label}.plist`);
...
L198: try {
L199: execFileSync('launchctl', ['unload', '-w', paths.targetPath], { stdio: 'ignore' });
L200: }
Findings
2 High4 Medium4 Low
HighSandbox Evasion Gated Capabilitydist/commands/install-daemon.js
HighPrevious Version Dangerous Deltadist/commands/connect.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/envInjector.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @intutic/cli@1.10.0.
See all versions of @intutic/cli for other recorded verdicts.
- Review the evidence and your use of @intutic/cli@1.10.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.