registry / @koda-sl/baker-cli / 0.532.0
@koda-sl/baker-cli@0.532.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection resolved the scanner’s execution, network, and Unicode flags to product command behavior and identifier validation. The package manifest has no install lifecycle hook, and no concrete attack surface was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI runs on invocation; local search and processing helpers run when their corresponding commands are selected.
Impact
The inspected effects support requested search ranking and flow configuration display; no unrelated recipient or hidden transfer was established.
Mechanism
Knowledge search runs qmd and submits its results to Baker’s configured API for ranking. Flow settings are revealed through Baker’s API when configured data is present.
AI rationale
Source inspection resolved the scanner’s execution, network, and Unicode flags to product command behavior and identifier validation. The package manifest has no install lifecycle hook, and no concrete attack surface was found.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI without an install lifecycle hook. The knowledge command is loaded through the CLI and, when invoked, runs qmd and sends passages to the configured Baker API for ranking.
- The inspected engine and media helpers run named tools for processing; no hidden command-output collection was established.
- The flow helper sends sealed configuration to Baker’s reveal endpoint when such configuration exists. The flagged invisible characters appear in a Unicode identifier-validation pattern.
- The cited dependency files implement phone-number and CSV parsing, validation, and related helpers.
- The other cited chunks contain product schemas, data readers, and domain-specific processing.
Evidence against
- Scanner flags for command execution, network access, and Unicode resolve to product command helpers, Baker API workflows, and an identifier-validation pattern; inspection found no concrete attack behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
10 flaggeddist/chunk-VPF5A7CM.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-PE4ZP7MX.jsView file
879// src/engine/nodes/local/lib/cli-runner.ts
L880: import { execFile as execFileCb, spawn } from "child_process";
L881: import { copyFile as copyFile2, mkdtemp, readFile, rm, stat } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-PE4ZP7MX.jsFindings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-YO54MA7R.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-YO54MA7R.js
CriticalPrevious Version Dangerous Deltadist/knowledge-L3VLOVLG.js
HighChild Processdist/chunk-PE4ZP7MX.js
HighCommand Output Exfiltrationdist/chunk-KITVYLEX.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-KITVYLEX.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-DJTWY7GL.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-VPF5A7CM.js
MediumDynamic Requiredist/chunk-PE4ZP7MX.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.532.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.532.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.