registry / @koda-sl/baker-cli / 0.592.0
@koda-sl/baker-cli@0.592.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package is a CLI for Baker's creative canvas, and the inspected process execution and network requests support its AI media-review features. The scanner's command-output and credential leads resolve to media processing and use of a user-configured OpenRouter key; no unrelated exfiltration was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI runs after a user invokes a command; AI review behavior is used by review features.
Impact
No unauthorized credential transfer or unrelated command-output exfiltration was established.
Mechanism
The inspected command execution supports video review and sends review content to OpenRouter when a key is configured.
AI rationale
The package is a CLI for Baker's creative canvas, and the inspected process execution and network requests support its AI media-review features. The scanner's command-output and credential leads resolve to media processing and use of a user-configured OpenRouter key; no unrelated exfiltration was found.
Evidence
User-selected video; temporary baker-review-* directory during video review
Network endpoints1
openrouter.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Baker creative-canvas CLI and exposes its CLI and engine entry points; it declares no lifecycle scripts.
- The CLI loads and runs a command selected from the user's arguments; it does not run a background task in the inspected startup path.
- AI review requests use the configured OpenRouter key and send review prompts or media to OpenRouter; this is consistent with the package's stated AI-assisted creative purpose.
- Video review uses ffmpeg to extract frames from the user-selected video for that review.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/chunk-A7PKBDYF.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-L45TFBVD.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @koda-sl/baker-cli@0.537.0
matchedIdentity = npm:QGtvZGEtc2wvYmFrZXItY2xp:0.537.0
similarity = 0.517
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-FEABI63Z.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-FEABI63Z.js
CriticalPrevious Version Dangerous Deltadist/chunk-L45TFBVD.js
HighChild Processdist/chunk-L45TFBVD.js
HighCommand Output Exfiltrationdist/chunk-L45TFBVD.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-L45TFBVD.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/chunk-L45TFBVD.js#virtual:normalized:round1
MediumSecret Patterndist/chunk-A7PKBDYF.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.592.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.592.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.