registry / @koda-sl/baker-cli / 0.543.0
@koda-sl/baker-cli@0.543.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package has no install lifecycle hooks, and the reviewed credential and network flows support user-invoked AI review features using a configured OpenRouter key. The scanner’s Unicode flag points to identifier validation, and the inspected CLI logging is local and configurable.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when invoked; AI review requests occur when those features are used and an OpenRouter key is configured.
Impact
No malicious impact was identified.
Mechanism
Inspected requests send feature inputs to OpenRouter using the configured key; no unrelated credential transfer or concealed automatic behavior was found.
AI rationale
The package has no install lifecycle hooks, and the reviewed credential and network flows support user-invoked AI review features using a configured OpenRouter key. The scanner’s Unicode flag points to identifier validation, and the inspected CLI logging is local and configurable.
Network endpoints1
openrouter.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines no install, preinstall, or postinstall hook; it identifies the package as a Baker CLI and points its executable and exports to dist entry points.
- OpenRouter requests require OPENROUTER_API_KEY and send the requested model messages to OpenRouter’s API.
- The flagged invisible Unicode characters occur in a Unicode-aware identifier-validation regex, not in executable hidden code.
- CLI startup logging writes locally only when debug logging is configured.
Evidence against
- The package uses process execution and network requests, but the inspected examples support media ingestion and explicitly keyed AI review features.
- The CLI runs setup and logging code at startup, but the inspected code does not show automatic credential collection or unrelated account actions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
8 flaggeddist/chunk-LBIF6FJY.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-AXSSATJW.jsView file
834// src/engine/nodes/ingest.ts
L835: import { execFile as execFileCb } from "child_process";
L836: import { createHash as createHash2 } from "crypto";
High
Child Process
Package source references child process execution.
dist/chunk-AXSSATJW.jsView on unpkg · L834Findings
2 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-YFRNONXL.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-YFRNONXL.js
HighChild Processdist/chunk-AXSSATJW.js
HighCommand Output Exfiltrationdist/chunk-4PWC4KAK.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-4PWC4KAK.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-4PWC4KAK.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-LBIF6FJY.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/chunk-LBIF6FJY.js
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.543.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.543.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.