registry / @m8t-stack/cli / 0.2.23
@m8t-stack/cli@0.2.23
CLI for managing m8t-stack deployments on Azure / Microsoft Agent Foundry
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe scanner signals reflect an operator-focused cloud-management CLI with intentionally privileged, user-invoked commands. Source inspection found no install-time execution, stealth persistence, foreign AI-agent control-surface mutation, or exfiltration behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
User explicitly invokes an `m8t` management or bootstrap command.
Impact
Authorized command use can modify the user's selected cloud resources, repositories, and `~/.m8t-stack` state; installation and import do not trigger it.
Mechanism
Documented Azure/GitHub deployment administration via CLI commands.
AI rationale
The scanner signals reflect an operator-focused cloud-management CLI with intentionally privileged, user-invoked commands. Source inspection found no install-time execution, stealth persistence, foreign AI-agent control-surface mutation, or exfiltration behavior.
Evidence
package.jsonREADME.mddist/cli.js.m8t/brain.yaml~/.m8t-stack/config.yaml~/.m8t-stack/bootstrap.json~/.m8t-stack/repo-root
Network endpoints3
api.github.commanagement.azure.comapi.githubcopilot.com/mcp
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- `dist/cli.js` has explicit commands that administer Azure, GitHub, and Foundry resources.
- `dist/cli.js` invokes `az`, `git`, `gh`, and user-requested bootstrap UI tooling.
Evidence against
- `package.json` has no preinstall/install/postinstall hook; only `prepublishOnly`.
- `dist/cli.js` enters command dispatch through `cli.run(process.argv.slice(2))`; no import-time operational action.
- Subprocess calls in `dist/cli.js` use fixed executables and argument arrays for documented CLI workflows.
- Network requests target Azure, GitHub, and GitHub Copilot endpoints aligned with the documented deployment/brain commands.
- No `eval`, `Function`, VM loading, hidden payload decoding, or credential exfiltration path was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
2 flagged · loading sourcedist/cli.jsView file
11482init_errors();
L11483: import { spawn } from "child_process";
L11484: var SECRET_VALUE_FLAGS = /* @__PURE__ */ new Set(["--secure-environment-variables"]);
High
22198);
L22199: this.context.stdout.write(
L22200: colors.dim("next: run 'm8t doctor' to verify gateway + data-plane access.\n")
...
L22206: // src/commands/open.ts
L22207: import { spawn as spawn5 } from "child_process";
L22208: import { Command as Command44, Option as Option41 } from "clipanion";
...
L22212: var OPEN_TARGETS = ["webapp", "foundry", "portal"];
L22213: var FOUNDRY_PORTAL_URL = "https://ai.azure.com";
L22214: function azurePortalRgUrl(tenantId, subscriptionId, resourceGroup) {
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L22198Findings
3 High2 Medium5 Low
HighChild Processdist/cli.js
HighShell
HighCommand Output Exfiltrationdist/cli.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @m8t-stack/cli@0.2.23.
See all versions of @m8t-stack/cli for other recorded verdicts.
- Review the evidence and your use of @m8t-stack/cli@0.2.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.