registry / @intutic/cli / 1.10.1
@intutic/cli@1.10.1
Intutic CLI — sync daemon, harness detection, and workspace management
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no npm lifecycle hook, and the reviewed network and agent integration paths are associated with user-invoked CLI operations or workspace settings. Scanner signals for networking, credentials, and persistence are consistent with the CLI’s stated sync and governance functions; no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command such as skill audit, connect, or daemon install.
Impact
No confirmed unconsented credential disclosure, install-time agent mutation, or other attack was established.
Mechanism
The CLI reads workspace files, retrieves saved credentials, and calls the configured Intutic API; reviewed harness functions write package-owned hooks when invoked.
AI rationale
The manifest has no npm lifecycle hook, and the reviewed network and agent integration paths are associated with user-invoked CLI operations or workspace settings. Scanner signals for networking, credentials, and persistence are consistent with the CLI’s stated sync and governance functions; no concrete attack behavior was found.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI entry point and contains no install lifecycle hook.
- Skill commands inspect workspace skill and agent files; credentialed reports use the configured Intutic API client, and the audit’s destructive and content-analysis options default off unless workspace settings enable them.
- Credential helpers retrieve tokens from the operating system keychain or credentials store; reviewed callers use the Intutic API client or package-owned harness setup functions.
- Harness adapter locations identify workspace or user configuration conventions and local hook-writing functions; they do not establish an automatic npm-triggered mutation.
- Device reporting requires saved credentials and recorded local enforcement state before posting to the configured Intutic API.
- Daemon installation is exposed as an explicit CLI command with required workspace credentials; no automatic package installation trigger was found.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
7 flaggeddist/commands/rollback.jsView file
29import { log } from '../lib/logger.js';
L30: const ROLLBACK_DIR = () => path.join(process.cwd(), '.intutic', 'rollback');
L31: const MANIFEST = () => path.join(ROLLBACK_DIR(), 'manifest.jsonl');
...
L37: .filter(Boolean)
L38: .map((l) => JSON.parse(l));
L39: }
...
L88: log.error(`No captured pre-image with id ${opts.id}. Run \`intutic rollback\` to list them.`);
L89: process.exitCode = 1;
L90: return;
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/commands/rollback.jsView on unpkg · L29dist/lib/envInjector.jsView file
7* Platform support:
L8: * macOS: launchctl setenv <KEY> <VALUE>
L9: * Linux: ~/.bashrc append (user-level; system /etc/environment requires sudo)
...
L14: */
L15: import { execSync } from 'node:child_process';
L16: import fs from 'node:fs';
...
L50: function linuxInjectUser(key, value) {
L51: const rcFile = path.join(os.homedir(), '.bashrc');
L52: const marker = `# intutic-env-${key}`;
...
L99: *
L100: * @param proxyUrl - The Intutic proxy URL (e.g. https://proxy.acme.intutic.ai)
L101: * @returns InjectionResult describing what was done
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
5 High4 Medium5 Low
HighSandbox Evasion Gated Capabilitydist/commands/install-daemon.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/commands/skill.js
HighTrigger Reachable Persistencedist/commands/install-daemon.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/commands/connect.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/envInjector.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/commands/rollback.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @intutic/cli@1.10.1.
See all versions of @intutic/cli for other recorded verdicts.
- Review the evidence and your use of @intutic/cli@1.10.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.