registry / @koda-sl/baker-cli / 0.552.0
@koda-sl/baker-cli@0.552.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe reviewed network traffic uses the user-configured OpenRouter key with OpenRouter’s API for AI task processing. Debug logging is configuration-gated and local; the flagged source indicators did not establish an unrelated or concealed attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs a CLI task that invokes an AI review or generation feature; debug file logging is separately enabled by configuration.
Impact
Expected task data is sent to the configured AI service; optional diagnostics are stored locally.
Mechanism
The CLI reads OPENROUTER_API_KEY and uses it in requests to OpenRouter. Optional debug logging writes invocation and output records locally.
AI rationale
The reviewed network traffic uses the user-configured OpenRouter key with OpenRouter’s API for AI task processing. Debug logging is configuration-gated and local; the flagged source indicators did not establish an unrelated or concealed attack.
Evidence
baker-cli-debug.jsonl or the configured debug log path
Network endpoints1
openrouter.ai/api/v1/chat/completions
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes an AI-agent CLI for Baker and declares no lifecycle scripts.
- AI requests use OPENROUTER_API_KEY and send task content to OpenRouter’s API.
- Debug logging requires a configured BAKER debug setting and writes to a local file.
Evidence against
- The CLI starts stream and invocation logging, but the logger is disabled unless its debug setting is configured.
- The reviewed credential flows use the configured OpenRouter key with OpenRouter endpoints; no unrelated credential destination was identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/chunk-O4OPH3ZE.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/scaffold-video-Y7X34F3N.jsView file
156// [redacted].ts
L157: import { execFile } from "child_process";
L158: import { mkdtemp, readdir, readFile, rm } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/scaffold-video-Y7X34F3N.jsView on unpkg · L156Findings
2 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-DZLPWNR4.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-DZLPWNR4.js
HighChild Processdist/scaffold-video-Y7X34F3N.js
HighCommand Output Exfiltrationdist/chunk-EZ6GOPHI.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-EZ6GOPHI.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-EZ6GOPHI.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-O4OPH3ZE.js
MediumDynamic Requiredist/scrape-G6QIBY6U.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Medium
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.552.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.552.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.