registry / @limai.io/cli / 0.4.6
@limai.io/cli@0.4.6
CLI and SDK for the LimAI data extraction platform
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged execution and network behavior is consistent with development-checkout discovery, LimAI API operations, and a user-invoked CLI updater. The manifest has no install hook, and the inspected credential flow uses the configured API URL.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Library API requests occur when callers use SDK methods; CLI actions run when a user invokes a command. The updater requires the explicit `update` command.
Impact
No automatic credential exfiltration, install-time data transfer, or unauthorized account action was identified.
Mechanism
The package reads LimAI configuration and credentials for requests to the configured service. Its child-process calls are fixed git metadata queries and, in the update command, an npm install of this package.
AI rationale
The flagged execution and network behavior is consistent with development-checkout discovery, LimAI API operations, and a user-invoked CLI updater. The manifest has no install hook, and the inspected credential flow uses the configured API URL.
Evidence
~/.limai/config.json.limai.tokenJOB_CONTEXT.json
Network endpoints4
registry.npmjs.orgapp.limai.iotables.localhostws.localhost
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a LimAI data extraction CLI and SDK, with `dist/index.js` as the library entry point and `dist/cli.js` as the command-line entry point.
- The only lifecycle script is `prepublishOnly: npm run build`; there is no install, preinstall, or postinstall hook.
- The library’s configuration code reads LimAI credentials and settings from the environment, `~/.limai/config.json`, or a LimAI monorepo checkout.
- The HTTP client sends the configured token as a bearer credential in requests to its configured API URL.
- The CLI’s npm install execution is inside the explicitly invoked `update` command.
Evidence against
- The package contains network, filesystem, and child-process capabilities, but the inspected paths tie them to API operations, configuration, development-checkout discovery, or the explicit updater.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggeddist/index.jsView file
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Le=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&l.indexOf("\r")===-1){i.push(l);return}i.push(l);let o=i.join("");i.length=0;let d=m(o);d!==""&&i.push(d)}function m(l){let o=0;if(l.indexOf("\r")===-1){let d=l.indexOf(`
High
1"use strict";var _e=Object.create;var ot=Object.defineProperty;var Le=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&l.indexOf("\r")===-1){i.push(l);return}i.push(l);let o=i.join("");i.length=0;let d=m(o);d!==""&&i.push(d)}function m(l){let o=0;if(l.indexOf("\r")===-1){let d=l.indexOf(`
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L11Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js
L1: "use strict";var _e=Object.create;var ot=Object.defineProperty;var Le=Object.getOwnPropertyDescriptor;var Ne=Object.getOwnPropertyNames;var Me=Object.getPrototypeOf,Fe=Object.proto...
L2: `)===-1&&l.indexOf("\r")===-1){i.push(l);return}i.push(l);let o=i.join("");i.length=0;let d=m(o);d!==""&&i.push(d)}function m(l){let o=0;if(l.indexOf("\r")===-1){let d=l.indexOf(`
Findings
2 Critical4 High3 Medium6 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighChild Processdist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @limai.io/cli@0.4.6.
See all versions of @limai.io/cli for other recorded verdicts.
- Review the evidence and your use of @limai.io/cli@0.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.