registry / @koda-sl/baker-cli / 0.679.0
@koda-sl/baker-cli@0.679.0
AI-agent-first CLI for interacting with Baker, including the Baker creative canvas.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe inspected code uses the OpenRouter key only for feature requests to OpenRouter endpoints, and the package declares no install lifecycle scripts. The scanner flags did not establish hidden or unrelated behavior in the reviewed paths.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes a feature that requests an AI review or JEV answers.
Impact
The service receives data needed for the requested feature; no unrelated credential collection or destination was identified.
Mechanism
The feature reads OPENROUTER_API_KEY and sends its request data to OpenRouter.
AI rationale
The inspected code uses the OpenRouter key only for feature requests to OpenRouter endpoints, and the package declares no install lifecycle scripts. The scanner flags did not establish hidden or unrelated behavior in the reviewed paths.
Network endpoints2
openrouter.ai/api/v1/chat/completionsopenrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Baker CLI and declares no install lifecycle scripts.
- The review gateway returns without a key; when used, it sends feature data with the OPENROUTER_API_KEY to OpenRouter.
- The JEV helper uses OpenRouter’s systemone endpoint and sends its questions with the same OpenRouter key.
Evidence against
- The CLI and engine entry points are expected for the package’s stated purpose.
- The inspected credential flow sends the package’s OpenRouter key to OpenRouter, its own service endpoint, rather than to a foreign host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/chunk-2DNX3Z5X.jsView file
59patternName = generic_password
severity = medium
line = 59
Medium
60patternName = generic_password
severity = medium
line = 60
Medium
dist/chunk-O6YJECEA.jsView file
1553// [redacted].ts
L1554: var require_ = createRequire(import.meta.url);
L1555: var DEFAULT_SPECIMEN = [
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/chunk-O6YJECEA.jsView on unpkg · L1553Findings
3 Critical1 High6 Medium6 Low
CriticalTrojan Source Unicodedist/chunk-SR4IVUCH.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-SR4IVUCH.js
CriticalPrevious Version Dangerous Deltadist/chunk-YK5PHCYD.js
HighSemantic Analysis Limiteddist/add-RGOKJ6K2.js#virtual:string-array:round1
MediumSecret Patterndist/chunk-2DNX3Z5X.js
MediumDynamic Requiredist/chunk-O6YJECEA.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/chunk-2DNX3Z5X.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @koda-sl/baker-cli@0.679.0.
See all versions of @koda-sl/baker-cli for other recorded verdicts.
- Review the evidence and your use of @koda-sl/baker-cli@0.679.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.