registry / @limai.io/cli / 0.4.12
@limai.io/cli@0.4.12
CLI and SDK for the LimAI data extraction platform
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected entry points fit the stated LimAI CLI and SDK purpose: the API client uses configured LimAI credentials, while the flagged update installation is triggered by an explicit command. No evidence showed automatic unrelated credential collection or command-output exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Network requests occur when users call SDK methods or run CLI commands; the update check and installation are tied to the explicit update command.
Impact
The inspected behavior supports the package's stated CLI and SDK purpose; no unrelated credential collection or automatic command-output exfiltration was identified.
Mechanism
The client sends the configured LimAI token in an Authorization header to its configured API URL. The CLI uses fixed Git commands to detect a LimAI monorepo context.
AI rationale
The inspected entry points fit the stated LimAI CLI and SDK purpose: the API client uses configured LimAI credentials, while the flagged update installation is triggered by an explicit command. No evidence showed automatic unrelated credential collection or command-output exfiltration.
Evidence
~/.limai/config.json<detected LimAI monorepo>/.limai.token
Network endpoints2
Configured API URLregistry.npmjs.org/@limai.io%2Fcli/latest
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies the package as a LimAI CLI and SDK, with a library entry point and a separate CLI binary.
- The HTTP client sends its configured token in an Authorization header to the configured API URL.
- The CLI update check and npm install are inside the explicit `update` command action.
Evidence against
- No attack behavior was identified in the inspected entry points; the flagged process execution detects LimAI monorepo context using fixed Git commands.
- The only declared lifecycle hook is `prepublishOnly`, which runs the package build rather than install-time code.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/index.jsView file
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Ne=Object.getOwnPropertyDescriptor;var Le=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&p.indexOf("\r")===-1){r.push(p);return}r.push(p);let c=r.join("");r.length=0;let m=w(c);m!==""&&r.push(m)}function w(p){let c=0;if(p.indexOf("\r")===-1){let m=p.indexOf(`
High
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Ne=Object.getOwnPropertyDescriptor;var Le=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&p.indexOf("\r")===-1){r.push(p);return}r.push(p);let c=r.join("");r.length=0;let m=w(c);m!==""&&r.push(m)}function w(p){let c=0;if(p.indexOf("\r")===-1){let m=p.indexOf(`
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L11Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js
L1: "use strict";var _e=Object.create;var ot=Object.defineProperty;var Ne=Object.getOwnPropertyDescriptor;var Le=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&p.indexOf("\r")===-1){r.push(p);return}r.push(p);let c=r.join("");r.length=0;let m=w(c);m!==""&&r.push(m)}function w(p){let c=0;if(p.indexOf("\r")===-1){let m=p.indexOf(`
Findings
2 Critical4 High3 Medium6 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighChild Processdist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @limai.io/cli@0.4.12.
See all versions of @limai.io/cli for other recorded verdicts.
- Review the evidence and your use of @limai.io/cli@0.4.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.