registry / @intutic/cli / 2.0.0
@intutic/cli@2.0.0
Intutic CLI — sync daemon, harness detection, and workspace management
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest exposes a CLI without lifecycle scripts, and the inspected runtime paths tie credentials and reports to explicit CLI operations and the configured Intutic control plane. Scanner flags for persistence and agent-related paths describe command capabilities; the inspected source did not establish unconsented install-time mutation or credential disclosure to an unrelated recipient.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs an exposed CLI command, such as connecting a workspace, auditing skills, or installing a daemon.
Impact
No confirmed malicious effect was identified; the inspected network requests support the CLI's workspace and skill-reporting functions.
Mechanism
Commands read stored credentials and make API requests through the configured control-plane URL; skill reporting is reached from the skill command. No install hook or unrelated credential recipient was found in the inspected source.
AI rationale
The manifest exposes a CLI without lifecycle scripts, and the inspected runtime paths tie credentials and reports to explicit CLI operations and the configured Intutic control plane. Scanner flags for persistence and agent-related paths describe command capabilities; the inspected source did not establish unconsented install-time mutation or credential disclosure to an unrelated recipient.
Network endpoints1
api.intutic.ai
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI entry point and has no install lifecycle hook; the inspected entry point dispatches explicit user commands.
- Inspected credential flows use the configured Intutic control plane, and skill reporting requires the explicit skill command; no unrelated recipient or unconsented install-time behavior was identified.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/commands/rollback.jsView file
29import { log } from '../lib/logger.js';
L30: const ROLLBACK_DIR = () => path.join(process.cwd(), '.intutic', 'rollback');
L31: const MANIFEST = () => path.join(ROLLBACK_DIR(), 'manifest.jsonl');
...
L37: .filter(Boolean)
L38: .map((l) => JSON.parse(l));
L39: }
...
L88: log.error(`No captured pre-image with id ${opts.id}. Run \`intutic rollback\` to list them.`);
L89: process.exitCode = 1;
L90: return;
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/commands/rollback.jsView on unpkg · L29dist/lib/envInjector.jsView file
7* Platform support:
L8: * macOS: launchctl setenv <KEY> <VALUE>
L9: * Linux: ~/.bashrc append (user-level; system /etc/environment requires sudo)
...
L14: */
L15: import { execSync } from 'node:child_process';
L16: import fs from 'node:fs';
...
L50: function linuxInjectUser(key, value) {
L51: const rcFile = path.join(os.homedir(), '.bashrc');
L52: const marker = `# intutic-env-${key}`;
...
L99: *
L100: * @param proxyUrl - The Intutic proxy URL (e.g. https://proxy.acme.intutic.ai)
L101: * @returns InjectionResult describing what was done
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
5 High4 Medium5 Low
HighSandbox Evasion Gated Capabilitydist/commands/install-daemon.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/commands/skill.js
HighTrigger Reachable Persistencedist/commands/install-daemon.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/commands/connect.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/envInjector.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/commands/rollback.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @intutic/cli@2.0.0.
See all versions of @intutic/cli for other recorded verdicts.
- Review the evidence and your use of @intutic/cli@2.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.