registry / @koda-sl/baker-cli / 0.548.0
@koda-sl/baker-cli@0.548.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe reviewed credential flow sends the configured OpenRouter key to OpenRouter for the package’s media review feature, which is invoked from the render flow. The package has no install lifecycle hook, and the flagged Unicode serves ordinary identifier validation.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes a render or review operation that produces reviewable media; OpenRouter calls also require OPENROUTER_API_KEY.
Impact
Expected feature behavior; no unrelated credential transfer, install-time contact, or concealed action was identified.
Mechanism
The package sends review prompts and media to OpenRouter’s own API using the configured key. Media tools process local render files.
AI rationale
The reviewed credential flow sends the configured OpenRouter key to OpenRouter for the package’s media review feature, which is invoked from the render flow. The package has no install lifecycle hook, and the flagged Unicode serves ordinary identifier validation.
Network endpoints2
openrouter.ai/api/v1/chat/completionsopenrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest lists ordinary build, development, typecheck, and test scripts; it has no install lifecycle hook.
- The OpenRouter request sends OPENROUTER_API_KEY as a bearer token to OpenRouter’s API, and does not run when that key is absent.
- Video review is called from the render flow when it has a reviewable video output.
- The flagged invisible Unicode characters occur in a regular expression for valid JavaScript identifier characters.
Evidence against
- The package uses subprocesses such as ffmpeg and ffprobe to process media, which is consistent with its creative-canvas CLI purpose.
- The CLI can log invocation and output details locally when its debug logging setting is enabled.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
9 flaggeddist/chunk-E54435XT.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-QK3HMAVU.jsView file
856// src/engine/nodes/local/lib/cli-runner.ts
L857: import { execFile as execFileCb, spawn } from "child_process";
L858: import { copyFile as copyFile2, mkdtemp, readFile, rm, stat } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-QK3HMAVU.jsFindings
2 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-SXYEIZND.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-SXYEIZND.js
HighChild Processdist/chunk-QK3HMAVU.js
HighCommand Output Exfiltrationdist/chunk-4D73PLXU.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-4D73PLXU.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-4D73PLXU.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-E54435XT.js
MediumDynamic Requiredist/chunk-QK3HMAVU.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Pattern
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.548.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.548.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.