registry / @koda-sl/baker-cli / 0.573.0
@koda-sl/baker-cli@0.573.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged credential flow uses an OpenRouter key for requests to OpenRouter, and reviewed media is passed to model-review helpers. The CLI runs the command selected by its arguments, and the manifest declares no install hooks; the Unicode finding is a legitimate identifier-validation regex.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command that requests model-based review and has configured an OpenRouter key.
Impact
No unauthorized collection or unrelated destination was found in the reviewed paths.
Mechanism
The review helper sends the requested prompt or media to OpenRouter using the configured key.
AI rationale
The flagged credential flow uses an OpenRouter key for requests to OpenRouter, and reviewed media is passed to model-review helpers. The CLI runs the command selected by its arguments, and the manifest declares no install hooks; the Unicode finding is a legitimate identifier-validation regex.
Network endpoints1
openrouter.ai/api/v1/chat/completions
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Baker creative CLI and declares no install lifecycle scripts.
- The CLI dispatches the supplied arguments to the selected command.
- The model helper returns without making a request unless OPENROUTER_API_KEY is configured, then sends requests to OpenRouter.
- Video review reads a specified video file and passes it to the model review helper.
- The flagged invisible characters appear in a Unicode identifier-validation regex.
Evidence against
- The CLI imports filesystem, process-execution and network-capable modules; these capabilities serve its stated creative-tool purpose.
- Review helpers can send user-supplied prompts and media to OpenRouter when invoked and configured.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
10 flaggeddist/chunk-B64KJW5C.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-HM4NWA72.jsView file
856// src/engine/nodes/local/lib/cli-runner.ts
L857: import { execFile as execFileCb, spawn } from "child_process";
L858: import { copyFile as copyFile2, mkdtemp, readFile, rm, stat } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-HM4NWA72.jsFindings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-N7EHQNNG.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-N7EHQNNG.js
CriticalPrevious Version Dangerous Deltadist/chunk-O5VSYBUA.js
HighChild Processdist/chunk-HM4NWA72.js
HighCommand Output Exfiltrationdist/chunk-47VWQ7FQ.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-47VWQ7FQ.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-2EEDKWYY.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-B64KJW5C.js
MediumDynamic Requiredist/chunk-HM4NWA72.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.573.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.573.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.