@kerno/cli@1.1.1
Kerno CLI - Local runtime backend testing inside your coding agent's loop.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe audit feature defaults to uploading reports with evidence, while headless runs bypass the sharing disclosure. This is a real consent and data-sharing risk, but the upload is part of the package’s audit service and requires a Kerno login, so the evidence supports a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running `kerno audit` without a terminal when sharing settings have not been saved; upload also requires a valid Kerno login and organization.
Impact
Workspace-derived audit data and quoted source evidence may be sent without an interactive disclosure, creating a data-sharing risk.
Mechanism
Sharing defaults enable upload and evidence. The no-terminal path skips disclosure, and the audit flow passes evidence to the upload routine, which posts the report to the Kerno backend.
AI rationale
The audit feature defaults to uploading reports with evidence, while headless runs bypass the sharing disclosure. This is a real consent and data-sharing risk, but the upload is part of the package’s audit service and requires a Kerno login, so the evidence supports a warning rather than a block.
Evidence
cli.jspackage.json
Network endpoints1
api.kerno.io
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Audit sharing defaults to uploading runs with evidence enabled.
- The disclosure gate skips the sharing prompt when no terminal is available.
- The audit flow uploads its report to the Kerno backend and includes evidence when enabled.
- The postinstall hook prints a welcome banner.
Evidence against
- Uploading requires the audit flow to have a valid Kerno login token and organization.
- The package’s stated purpose is local backend validation, and the upload belongs to its audit feature.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
NoLicense
Oversized source lightweight scan
cli.js
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli.jsView file
48* Constructs the CommanderError class
L49: * @param {number} exitCode suggested exit code which could be used with process.exit
L50: * @param {string} code an id string representing the error
...
L128: /**
L129: * @api private
L130: */
...
L941: var EventEmitter5 = __require("events").EventEmitter;
L942: var childProcess = __require("child_process");
L943: var path23 = __require("path");
...
L990: this._outputConfiguration = {
L991: writeOut: (str) => process15.stdout.write(str),
L992: writeErr: (str) => process15.stderr.write(str),
Critical
Findings
3 Critical6 High5 Medium5 Low
CriticalRemote Asset Decode Executecli.js
CriticalTrigger Reachable Dangerous Capabilitycli.js
CriticalPrevious Version Dangerous Deltapostinstall.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processcli.js
HighShellcli.js
HighCredential Redirect Persistencecli.js
HighCommand Output Exfiltrationcli.js
HighSemantic Analysis Limitedcli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumOversized Source Filecli.js
MediumOversized Cli Entrypoint
Affected versions and remediation
This report applies to @kerno/cli@1.1.1.
See all versions of @kerno/cli for other recorded verdicts.
- Review the evidence and your use of @kerno/cli@1.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.