registry / @koda-sl/baker-cli / 0.533.0
@koda-sl/baker-cli@0.533.0
⚠ Under reviewAI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe reviewed excerpts show ordinary CLI, media-processing, and Baker API behavior, with no confirmed attack chain. Required runtime paths remain unresolved, so the evidence is insufficient for a clean verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Use of the Baker CLI or its exported engine features.
Impact
The inspected excerpts show no confirmed harmful effect, but do not establish that all runtime behavior is benign.
Mechanism
The inspected code runs local media and search tools and calls Baker APIs; the remaining required runtime paths were not resolved.
AI rationale
The reviewed excerpts show ordinary CLI, media-processing, and Baker API behavior, with no confirmed attack chain. Required runtime paths remain unresolved, so the evidence is insufficient for a clean verdict.
Network endpoints2
/api/flows/destinations/reveal/api/knowledge/rank
Decision evidence
public snapshotAI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json defines a CLI entry point and lists no install lifecycle hooks.
- The knowledge command runs the local qmd executable and submits bounded passages to Baker’s knowledge-ranking API.
- The inspected local media helpers invoke ffprobe and ffmpeg for media processing.
- The flow helper reveals sealed flow settings through Baker’s API when that code path is invoked.
Evidence against
- The inspected excerpts do not establish an install-time trigger, credential export, or command-output exfiltration.
- The source review did not resolve all required runtime paths, so the broader package behavior remains uncertain.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/chunk-VPF5A7CM.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-PE4ZP7MX.jsView file
879// src/engine/nodes/local/lib/cli-runner.ts
L880: import { execFile as execFileCb, spawn } from "child_process";
L881: import { copyFile as copyFile2, mkdtemp, readFile, rm, stat } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-PE4ZP7MX.jsFindings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-YO54MA7R.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-YO54MA7R.js
CriticalPrevious Version Dangerous Deltadist/knowledge-L3VLOVLG.js
HighChild Processdist/chunk-PE4ZP7MX.js
HighCommand Output Exfiltrationdist/chunk-KITVYLEX.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-KITVYLEX.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-DJTWY7GL.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-VPF5A7CM.js
MediumDynamic Requiredist/chunk-PE4ZP7MX.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.533.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.533.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.