registry / @koda-sl/baker-cli / 0.662.0
@koda-sl/baker-cli@0.662.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest has no install lifecycle hooks, and the inspected runtime behavior fits the Baker CLI’s AI and video-review features. Flagged command execution uses ffmpeg on review video, while the credential flows examined send the OpenRouter key to OpenRouter; no attack was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when invoked; AI review calls occur when requested by a feature and an OpenRouter key is configured.
Impact
No malicious impact identified in the inspected flows.
Mechanism
The reviewed code sends AI review requests to OpenRouter and uses ffmpeg to analyze supplied video; no unrelated collection or concealed behavior was established.
AI rationale
The manifest has no install lifecycle hooks, and the inspected runtime behavior fits the Baker CLI’s AI and video-review features. Flagged command execution uses ffmpeg on review video, while the credential flows examined send the OpenRouter key to OpenRouter; no attack was identified.
Evidence
dist/cli.jsdist/chunk-ZYN5MTPN.jsdist/chunk-2DNX3Z5X.jsdist/chunk-LTBH3OUF.jspackage.json
Network endpoints2
openrouter.ai/api/v1/chat/completionsopenrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest defines build, development, typecheck, export, and test scripts, with no lifecycle install scripts.
- The CLI runs its command handler when invoked; the manifest exposes it as the baker binary and package entry point.
- The OpenRouter review call returns without sending when OPENROUTER_API_KEY is absent and otherwise sends requests to openrouter.ai.
- Video review invokes ffmpeg with generated frame-grab arguments and reads those frames for review.
Evidence against
- The CLI and engine perform network requests, use environment variables, and execute ffmpeg, but the inspected flows support the package’s Baker AI CLI and media review features.
- The credential flows inspected use the OpenRouter key with OpenRouter endpoints; I found no unrelated credential destination in those flows.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
8 flaggeddist/chunk-2DNX3Z5X.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-ZYN5MTPN.jsView file
105// [redacted]-review.ts
L106: import { execFile } from "child_process";
L107: import { mkdtemp, readdir, readFile, rm } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-ZYN5MTPN.jsView on unpkg · L105Findings
2 Critical4 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-6YZORXXZ.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-6YZORXXZ.js
HighChild Processdist/chunk-ZYN5MTPN.js
HighCommand Output Exfiltrationdist/chunk-ZYN5MTPN.js#virtual:normalized:round1
HighTrigger Reachable Command Output Exfiltrationdist/chunk-ZYN5MTPN.js#virtual:normalized:round1
HighSemantic Analysis Limiteddist/add-FG23VMNQ.js#virtual:string-array:round1
MediumSecret Patterndist/chunk-2DNX3Z5X.js
MediumDynamic Require
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/chunk-2DNX3Z5X.js
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.662.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.662.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.