registry / @kerno/cli / 1.0.0
@kerno/cli@1.0.0
Kerno CLI - Local backend validation for AI-generated code, against your real stack.
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe scanner’s execution and network indicators correspond to the user-invoked Kerno agent setup flow, while the install hook only prints a banner. The inspected telemetry is directed to the configured first-party analytics endpoint, and no concrete malicious behavior was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The postinstall hook runs during package installation; agent download and execution occur when a user invokes the CLI setup flow and an agent needs installing or updating.
Impact
The inspected behavior is consistent with the CLI’s agent setup and diagnostics; no malicious impact was established.
Mechanism
The postinstall hook prints a banner. The CLI setup flow can download and execute a versioned installer from Kerno’s GitHub repository; installer failure output may be included in a PostHog event.
AI rationale
The scanner’s execution and network indicators correspond to the user-invoked Kerno agent setup flow, while the install hook only prints a banner. The inspected telemetry is directed to the configured first-party analytics endpoint, and no concrete malicious behavior was found.
Evidence
package.jsonpostinstall.cjscli.js
Network endpoints2
raw.githubusercontent.comeu.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs postinstall.cjs, which only prints a banner to the terminal.
- The CLI’s init flow downloads the Kerno agent installer when the agent needs installation or updating.
- The installer comes from Kerno’s kerno-agent-runtimes repository at a configured version; the CLI runs it as a shell or PowerShell script during agent setup.
- Installer failure output is sent as a diagnostic event to the configured first-party PostHog endpoint.
- The inspected source shows no malicious behavior beyond these package-aligned setup and telemetry functions.
Evidence against
- The CLI executes a downloaded installer, and on failure includes its recent output in telemetry.
- The CLI initializes analytics during startup and identifies logged-in users.
Behavioral surface
EnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli.jsView file
48* Constructs the CommanderError class
L49: * @param {number} exitCode suggested exit code which could be used with process.exit
L50: * @param {string} code an id string representing the error
...
L128: /**
L129: * @api private
L130: */
...
L941: var EventEmitter5 = __require("events").EventEmitter;
L942: var childProcess = __require("child_process");
L943: var path16 = __require("path");
...
L990: this._outputConfiguration = {
L991: writeOut: (str) => process15.stdout.write(str),
L992: writeErr: (str) => process15.stderr.write(str),
Critical
Findings
2 Critical4 High5 Medium5 Low
CriticalRemote Asset Decode Executecli.js
CriticalTrigger Reachable Dangerous Capabilitycli.js
HighInstall Time Lifecycle Scriptspackage.json
HighSame File Env Network Executioncli.js
HighCommand Output Exfiltrationcli.js
HighSemantic Analysis Limitedcli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumOversized Source Filecli.js
MediumOversized Cli Entrypointcli.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to @kerno/cli@1.0.0.
See all versions of @kerno/cli for other recorded verdicts.
- Review the evidence and your use of @kerno/cli@1.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.