registry / @lotics/cli / 0.294.0
@lotics/cli@0.294.0
Lotics SDK and CLI for AI agents
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe scanner signals resolve to ordinary API authentication, opt-in diagnostics, and user-invoked build or upgrade operations. Direct inspection found no concrete malicious behavior or guarded agent configuration capability warranting a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit CLI commands activate authentication, builds, deployment, and upgrades; diagnostics additionally require an environment opt-in.
Impact
No covert credential export, foreign agent configuration mutation, or malicious install-time execution was established.
Mechanism
The CLI authenticates to its selected API, stores its own configuration, and invokes local build tools for user-requested operations.
AI rationale
The scanner signals resolve to ordinary API authentication, opt-in diagnostics, and user-invoked build or upgrade operations. Direct inspection found no concrete malicious behavior or guarded agent configuration capability warranting a warning.
Evidence
.lotics/config.json
Network endpoints4
api.lotics.airegistry.npmjs.org/@lotics/cli/latestlotics.ai/install.ps1lotics.ai/install.sh
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI and SDK, has only a publishing build hook, and has no runtime self-dependency or registry-install hook.
- The flagged agent integration location is a documentation registry entry; it does not write agent configuration or install plugins.
- Diagnostics require LOTICS_TELEMETRY=1 and send command metadata and bounded error text to the active Lotics API.
- Authentication uses a caller-supplied or prompted API key with the selected Lotics server; the default is https://api.lotics.ai.
- Local npm execution supports explicit app creation and deployment; dependency installation disables lifecycle scripts.
- Shell-based self-upgrade runs only through the explicit upgrade command; automatic update checks retrieve version metadata.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
8 flaggeddist/src/cli.jsView file
42429// src/cli_dispatch.ts
L42430: import { spawn as spawn2 } from "node:child_process";
L42431:
High
Child Process
Package source references child process execution.
dist/src/cli.jsView on unpkg · L4242942447// docs/cli_reference.md
L42448: var cli_reference_default = "# @lotics/cli \u2014 CLI Command Reference\n\nPer-command syntax, flags, contracts, and gotchas for the public `lotics` CLI. Start at [AGENTS.md](../AG...
L42449:
High
640loggedProperties[propertyName] = true;
L641: _logger2["default"].log("error", 'Handlebars: Access has been denied to resolve the property "' + propertyName + '" because it is not an "own property" of its parent.\nYou can add ...
L642: }
...
L928: },
L929: data: function data(value, depth) {
L930: while (value && depth--) {
...
L2907:
L2908: // ../../node_modules/handlebars/node_modules/source-map/lib/base64.js
L2909: var require_base64 = __commonJS({
...
L5680: (function() {
L5681: var reservedWords = "break else new var case finally return void catch for switch while continue function this with default if throw delete in try do instanceof typeof abstract enu...
L5682: var compilerWords = JavaScriptCompiler.RESERVED_WORDS = {};
Findings
8 High4 Medium6 Low
HighChild Processdist/src/cli.js
HighShelldist/src/cli.js
HighHost Fingerprint Exfiltrationdist/src/cli.js
HighCredential Redirect Persistencedist/src/cli.js
HighCommand Output Exfiltrationdist/src/cli.js
HighSandbox Evasion Gated Capabilitydist/src/cli.js
HighRemote Agent Bridgedist/src/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/src/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @lotics/cli@0.294.0.
See all versions of @lotics/cli for other recorded verdicts.
- Review the evidence and your use of @lotics/cli@0.294.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.