registry / @limai.io/cli / 0.4.11
@limai.io/cli@0.4.11
CLI and SDK for the LimAI data extraction platform
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged subprocess is used for local Git metadata discovery, and the npm install flow is reachable only through the explicit update command. Token use is part of authenticated requests to the configured LimAI API.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
API requests occur when users call SDK or CLI operations; the update check and install occur when a user invokes limai update.
Impact
No automatic credential exfiltration, install-time contact, or unrelated execution was identified.
Mechanism
Requests use the configured API URL and LimAI bearer token. The update command checks registry.npmjs.org and installs the latest package after invocation.
AI rationale
The flagged subprocess is used for local Git metadata discovery, and the npm install flow is reachable only through the explicit update command. Token use is part of authenticated requests to the configured LimAI API.
Evidence
~/.limai/config.json.limai.tokentables/.env.local
Network endpoints2
Configured apiUrl/api/v1/*registry.npmjs.org/@limai.io%2fcli/latest
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a JavaScript SDK and CLI; its only lifecycle hook is prepublishOnly, which runs the build.
- The SDK uses its configured API URL and sends its configured LimAI token as a bearer credential for API requests.
- The Git subprocess uses fixed rev-parse commands to inspect local repository metadata and proceeds only for a repository containing packages/cli.
- The npm registry check and global install are implemented inside the explicitly invoked limai update command.
Evidence against
- The package reads environment variables and local LimAI configuration for credentials and API settings.
- The CLI contains child-process execution, network access, and an npm install operation, but the inspected flows are tied to local repository detection, API use, or the explicit update command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
6 flaggeddist/index.jsView file
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Ne=Object.getOwnPropertyDescriptor;var Le=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&p.indexOf("\r")===-1){r.push(p);return}r.push(p);let c=r.join("");r.length=0;let g=R(c);g!==""&&r.push(g)}function R(p){let c=0;if(p.indexOf("\r")===-1){let g=p.indexOf(`
High
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Ne=Object.getOwnPropertyDescriptor;var Le=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&p.indexOf("\r")===-1){r.push(p);return}r.push(p);let c=r.join("");r.length=0;let g=R(c);g!==""&&r.push(g)}function R(p){let c=0;if(p.indexOf("\r")===-1){let g=p.indexOf(`
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L11Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js
L1: "use strict";var _e=Object.create;var ot=Object.defineProperty;var Ne=Object.getOwnPropertyDescriptor;var Le=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&p.indexOf("\r")===-1){r.push(p);return}r.push(p);let c=r.join("");r.length=0;let g=R(c);g!==""&&r.push(g)}function R(p){let c=0;if(p.indexOf("\r")===-1){let g=p.indexOf(`
Findings
2 Critical4 High3 Medium6 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighChild Processdist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @limai.io/cli@0.4.11.
See all versions of @limai.io/cli for other recorded verdicts.
- Review the evidence and your use of @limai.io/cli@0.4.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.