registry / @koda-sl/baker-cli / 0.618.0
@koda-sl/baker-cli@0.618.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe scanner’s command-execution and network findings resolve to workspace content checks during rules-add and user-keyed OpenRouter review requests. The flagged Unicode is used in a Unicode identifier regex, and no malicious behavior was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI commands; image or video review uses OpenRouter when an API key is configured.
Impact
No unauthorized collection, account action, or destructive behavior was identified.
Mechanism
The rules-add workflow reads selected workspace content with git. Review functions send their review payload using the configured OpenRouter key to OpenRouter.
AI rationale
The scanner’s command-execution and network findings resolve to workspace content checks during rules-add and user-keyed OpenRouter review requests. The flagged Unicode is used in a Unicode identifier regex, and no malicious behavior was found.
Evidence
src/pagessrc/componentssrc/lib/flow-engine/flowsreports/publicsrc/documentsbaker-published-* (temporary directory)
Network endpoints2
openrouter.ai/api/v1/chat/completionsopenrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as Baker’s CLI and exposes dist/cli.js as its command entry point.
- The git calls run only inside the workspace during the explicit rules-add command, checking named published-content paths against main or origin/main.
- The OpenRouter calls use OPENROUTER_API_KEY for requests to OpenRouter’s API as part of image or video review.
- The flagged invisible Unicode characters occur in a regular expression that accepts Unicode identifier characters.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/chunk-3WEWQWRV.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/add-24YCJ5DN.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @koda-sl/baker-cli@0.537.0
matchedIdentity = npm:QGtvZGEtc2wvYmFrZXItY2xp:0.537.0
similarity = 0.425
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
Findings
3 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-OFEHCFDX.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-OFEHCFDX.js
CriticalPrevious Version Dangerous Deltadist/add-24YCJ5DN.js
HighChild Processdist/add-24YCJ5DN.js
HighCommand Output Exfiltrationdist/chunk-6XWTVAJN.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-6XWTVAJN.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/add-24YCJ5DN.js#virtual:string-array:round1
MediumSecret Patterndist/chunk-3WEWQWRV.js
MediumDynamic Requiredist/chunk-DPI3MOIZ.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.618.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.618.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.