registry / @limai.io/cli / 0.4.4
@limai.io/cli@0.4.4
CLI and SDK for the LimAI data extraction platform
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest identifies this as LimAI's CLI and SDK, and the inspected requests send LimAI authentication to the configured API URL. The scanner's process execution lead resolves to Git metadata checks; I found no install-time attack or unrelated exfiltration behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes a CLI command or calls an SDK method that makes an API request.
Impact
No harmful or unrelated data flow was identified in the inspected entry points.
Mechanism
Requests use the configured API URL and LimAI bearer token. When set, `VERCEL_BYPASS` is sent in the Vercel protection header. Git commands are limited to reading repository metadata for local development configuration.
AI rationale
The manifest identifies this as LimAI's CLI and SDK, and the inspected requests send LimAI authentication to the configured API URL. The scanner's process execution lead resolves to Git metadata checks; I found no install-time attack or unrelated exfiltration behavior.
Evidence
~/.limai/config.json
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a LimAI data extraction CLI and SDK, with `dist/index.js` as its library entry point and `dist/cli.js` as its command.
- The HTTP client builds requests from the configured API URL and sends the LimAI bearer token; `VERCEL_BYPASS` is included as a Vercel protection header for those requests.
- The library's Git commands read repository metadata to detect a LimAI monorepo and derive local development URLs.
Evidence against
- The client forwards `VERCEL_BYPASS` with API requests, so that value reaches whichever API URL the user configures.
- The CLI and library use network requests and read configuration or environment variables during ordinary use.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/index.jsView file
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Le=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&l.indexOf("\r")===-1){i.push(l);return}i.push(l);let o=i.join("");i.length=0;let d=m(o);d!==""&&i.push(d)}function m(l){let o=0;if(l.indexOf("\r")===-1){let d=l.indexOf(`
High
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Le=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&l.indexOf("\r")===-1){i.push(l);return}i.push(l);let o=i.join("");i.length=0;let d=m(o);d!==""&&i.push(d)}function m(l){let o=0;if(l.indexOf("\r")===-1){let d=l.indexOf(`
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L11Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js
L1: "use strict";var _e=Object.create;var ot=Object.defineProperty;var Le=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&l.indexOf("\r")===-1){i.push(l);return}i.push(l);let o=i.join("");i.length=0;let d=m(o);d!==""&&i.push(d)}function m(l){let o=0;if(l.indexOf("\r")===-1){let d=l.indexOf(`
Findings
2 Critical4 High3 Medium6 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighChild Processdist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @limai.io/cli@0.4.4.
See all versions of @limai.io/cli for other recorded verdicts.
- Review the evidence and your use of @limai.io/cli@0.4.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.