registry / @koda-sl/baker-cli / 0.589.0
@koda-sl/baker-cli@0.589.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged command execution is media analysis, and the inspected credential flow uses an environment-provided OpenRouter key with OpenRouter’s API. No install-time behavior or unrelated credential exfiltration was identified.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Network requests occur when AI features are explicitly used with an OpenRouter key; media tools run when video analysis is requested.
Impact
No malicious impact identified in the inspected flows.
Mechanism
The package sends feature input to OpenRouter using the user-configured key and invokes ffprobe/ffmpeg on media files for analysis.
AI rationale
The flagged command execution is media analysis, and the inspected credential flow uses an environment-provided OpenRouter key with OpenRouter’s API. No install-time behavior or unrelated credential exfiltration was identified.
Network endpoints1
openrouter.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as an AI-agent-first CLI for Baker.
- The AI gateway uses an OpenRouter key from the environment and sends requests to OpenRouter.
- The flagged child-process calls run ffprobe and ffmpeg to inspect user-supplied video media.
Evidence against
- No install lifecycle scripts are declared.
- The inspected credential flow sends the OpenRouter key to OpenRouter, its API host; no unrelated credential collector was identified.
- The command execution inspected is limited to media analysis, not shelling out user command output for transmission.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/chunk-A7PKBDYF.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-L45TFBVD.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @koda-sl/baker-cli@0.537.0
matchedIdentity = npm:QGtvZGEtc2wvYmFrZXItY2xp:0.537.0
similarity = 0.525
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-YRDV2Q4O.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-YRDV2Q4O.js
CriticalPrevious Version Dangerous Deltadist/chunk-L45TFBVD.js
HighChild Processdist/chunk-L45TFBVD.js
HighCommand Output Exfiltrationdist/chunk-L45TFBVD.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-L45TFBVD.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-L45TFBVD.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-A7PKBDYF.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.589.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.589.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.