registry / @koda-sl/baker-cli / 0.544.0
@koda-sl/baker-cli@0.544.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe inspected findings are consistent with Baker’s AI creative CLI: OpenRouter credentials are sent to OpenRouter for review requests, while command execution supports local media processing. No install hook or unrelated credential exfiltration was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Relevant CLI commands or review operations invoked by the user; debug logging requires BAKER_DEBUG_LOG to be configured.
Impact
No malicious impact identified from the inspected flows.
Mechanism
The package uses OpenRouter for requested AI review and local ffmpeg/ffprobe tools for media processing. No install-time data collection or unrelated credential destination was identified.
AI rationale
The inspected findings are consistent with Baker’s AI creative CLI: OpenRouter credentials are sent to OpenRouter for review requests, while command execution supports local media processing. No install hook or unrelated credential exfiltration was found.
Network endpoints2
openrouter.ai/api/v1/chat/completionsopenrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists build, dev, typecheck and test scripts, with no install lifecycle hook.
- The OpenRouter credential is read from OPENROUTER_API_KEY and sent as a Bearer token to OpenRouter’s API.
- AI review sends its prompt and selected image or video to that same gateway when the relevant review function is called.
- The flagged invisible characters occur in a Unicode identifier-continuation regex, not concealed executable behavior.
- Debug logs are written locally only when BAKER_DEBUG_LOG is configured.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/chunk-E54435XT.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-QK3HMAVU.jsView file
856// src/engine/nodes/local/lib/cli-runner.ts
L857: import { execFile as execFileCb, spawn } from "child_process";
L858: import { copyFile as copyFile2, mkdtemp, readFile, rm, stat } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-QK3HMAVU.jsFindings
2 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-MVWR7JNJ.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-MVWR7JNJ.js
HighChild Processdist/chunk-QK3HMAVU.js
HighCommand Output Exfiltrationdist/chunk-4D73PLXU.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-4D73PLXU.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-4D73PLXU.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-E54435XT.js
MediumDynamic Requiredist/chunk-QK3HMAVU.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Pattern
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.544.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.544.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.