registry / @koda-sl/baker-cli / 0.578.0
@koda-sl/baker-cli@0.578.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest exposes a Baker CLI without install hooks, and inspected requests use a caller-supplied OpenRouter key to send model inputs to OpenRouter. The flagged process execution inspects media for review; no unrelated credential collection or command-output exfiltration was identified.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command that invokes model-backed review or proxy functionality.
Impact
Expected service use may transmit user-selected content to the configured provider; the inspected code does not show credential theft or unrelated collection.
Mechanism
Model requests use OPENROUTER_API_KEY with OpenRouter; media review sends the requested media or derived inputs for analysis.
AI rationale
The manifest exposes a Baker CLI without install hooks, and inspected requests use a caller-supplied OpenRouter key to send model inputs to OpenRouter. The flagged process execution inspects media for review; no unrelated credential collection or command-output exfiltration was identified.
Evidence
src/lib/flow-engine/flows/<slug>/_data.json
Network endpoints3
openrouter.aidc.oxylabs.iopr.oxylabs.io
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes an AI-focused Baker CLI and exposes CLI and engine entry points.
- The package has no install, preinstall, or postinstall lifecycle scripts.
- The CLI dispatches commands from the supplied arguments.
- OpenRouter requests use the caller-provided OPENROUTER_API_KEY and send the requested model inputs to OpenRouter.
- Video review reads the specified video and passes it to the model gateway; ffprobe and ffmpeg inspect media properties.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/chunk-HUVA6B7N.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-7ZFXYTTC.jsView file
76// [redacted]-review.ts
L77: import { execFile } from "child_process";
L78: import { mkdtemp, readdir, readFile, rm } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-7ZFXYTTC.jsView on unpkg · L76Findings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-GALOBFYQ.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-GALOBFYQ.js
CriticalPrevious Version Dangerous Deltadist/chunk-ZFWMH4SV.js
HighChild Processdist/chunk-7ZFXYTTC.js
HighCommand Output Exfiltrationdist/chunk-7ZFXYTTC.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-7ZFXYTTC.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-7ZFXYTTC.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-HUVA6B7N.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.578.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.578.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.