registry / @koda-sl/baker-cli / 0.635.0
@koda-sl/baker-cli@0.635.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential and network flow is an expected AI-review feature: the OpenRouter key goes to OpenRouter, and render content is submitted for review. The manifest has no install lifecycle script, and the flagged Unicode and child-process indicators did not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A render-review operation that uses an available OpenRouter key.
Impact
Render content is sent to the configured model service for review.
Mechanism
Reads OPENROUTER_API_KEY and sends model requests to OpenRouter’s API.
AI rationale
The flagged credential and network flow is an expected AI-review feature: the OpenRouter key goes to OpenRouter, and render content is submitted for review. The manifest has no install lifecycle script, and the flagged Unicode and child-process indicators did not establish malicious behavior.
Network endpoints1
openrouter.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a Baker CLI and declares build, development, typecheck, export, and test scripts; it has no install lifecycle script.
- The OpenRouter key is read from OPENROUTER_API_KEY and used for a request to OpenRouter’s API.
- The model request sends render-review content, including a video when review is requested.
Evidence against
- The flagged source excerpt contains no bidirectional override character; the zero-width characters appear in a JavaScript identifier-validation regex.
- The flagged child-process use is not shown to send command output to a network host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/chunk-IRD3REWN.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-NHLUC5I4.jsView file
17// src/commands/canvas/inspect.ts
L18: import { execFile } from "child_process";
L19: import { readdir, readFile, stat, writeFile } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-NHLUC5I4.jsView on unpkg · L17Findings
2 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-EPM7E7CP.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-EPM7E7CP.js
HighChild Processdist/chunk-NHLUC5I4.js
HighCommand Output Exfiltrationdist/chunk-ETOLHZW2.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-ETOLHZW2.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/add-7UOJHMMR.js#virtual:string-array:round1
MediumSecret Patterndist/chunk-IRD3REWN.js
MediumDynamic Requiredist/chunk-NC7IYUOD.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Pattern
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.635.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.635.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.