registry / @koda-sl/baker-cli / 0.562.0
@koda-sl/baker-cli@0.562.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package is an AI-agent CLI, and the flagged network activity sends review inputs to OpenRouter using an explicitly configured OPENROUTER_API_KEY. The manifest has no install hook, debug logging is opt-in, and the flagged invisible characters are used in a Unicode identifier regex.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
AI review calls require the relevant function to be invoked and an OPENROUTER_API_KEY; debug logging requires BAKER_DEBUG_LOG.
Impact
No unrelated credential transfer, hidden install-time behavior, or automatic destructive action was found.
Mechanism
Review inputs are sent to OpenRouter using the user's configured key. Optional debug output is written locally to the configured path.
AI rationale
The package is an AI-agent CLI, and the flagged network activity sends review inputs to OpenRouter using an explicitly configured OPENROUTER_API_KEY. The manifest has no install hook, debug logging is opt-in, and the flagged invisible characters are used in a Unicode identifier regex.
Evidence
video path supplied to reviewpath configured by BAKER_DEBUG_LOG (when set)
Network endpoints1
openrouter.ai
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes an AI-agent CLI for Baker and exposes its CLI and engine entry points.
- The AI gateway reads OPENROUTER_API_KEY and sends requests to OpenRouter.
- Gateway requests contain model messages and supplied content; video review reads the video path passed to it.
- Debug logging is disabled unless BAKER_DEBUG_LOG is set.
- The flagged invisible characters occur in a Unicode identifier regex.
Evidence against
- The manifest's scripts are build, development, typecheck, and test scripts; it declares no install lifecycle hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/chunk-45D6WRCJ.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/scaffold-video-NWRJZQ7N.jsView file
156// [redacted].ts
L157: import { execFile } from "child_process";
L158: import { mkdtemp, readdir, readFile, rm } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/scaffold-video-NWRJZQ7N.jsView on unpkg · L156Findings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-MSGIF4EC.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-MSGIF4EC.js
CriticalPrevious Version Dangerous Deltadist/chunk-X6U3B6YK.js
HighChild Processdist/scaffold-video-NWRJZQ7N.js
HighCommand Output Exfiltrationdist/chunk-DLM5OSHM.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-DLM5OSHM.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-72VH4FPY.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-45D6WRCJ.js
MediumDynamic Requiredist/chunk-DWPOAU4Z.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.562.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.562.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.