@merels/cli@0.0.10
Developer CLI toolchain to connect, build, and publish registered games on Merels
AI Security Review
scanned 22d ago · by lpm-firewall-aiStatic inspection establishes command-triggered agent instruction mutation, which warrants a warning under the supplied policy. No automatic npm install hook or concrete malicious chain was identified.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Running Merels CLI commands in a recognized project, or invoking skills, examples, or connect.
Impact
These files can influence subsequent AI-agent behavior within the project; the inspected behavior does not establish install-time hijacking or malware intent.
Mechanism
A command hook rewrites AGENTS.md; explicit setup commands write skills and synchronize downloaded agent instructions. Later commands can automatically restore the development-guide header without a separate consent prompt.
AI rationale
Static inspection establishes command-triggered agent instruction mutation, which warrants a warning under the supplied policy. No automatic npm install hook or concrete malicious chain was identified.
Evidence
dist/index.jsdist/telemetry.jssrc/telemetry.tsdist/commands/skills.jsdist/commands/installExamples.jssrc/commands/installExamples.tsAGENTS.md.agents/skills
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- dist/index.js automatically runs project customizations before many explicit CLI commands.
- dist/telemetry.js and src/telemetry.ts prepend development instructions to project AGENTS.md and write the modified file.
- dist/commands/skills.js installs agent skills into .agents/skills through an explicit command.
- Both installExamples implementations synchronize downloaded AGENTS.md content using manifest checksums.
- package.json has no automatic npm install lifecycle hooks or runtime self-dependency.
Evidence against
- Agent changes are scoped to project workflows rather than npm installation.
- Example downloads receive checksum verification; stale skill removal is limited to Merels-prefixed names.
- Inspected UI test implementations invoke project-local testing tools.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
UrlStrings
Source & flagged code
6 flagged · loading sourcedist/telemetry.jsView file
2import os from 'node:os';
L3: import { execSync } from 'node:child_process';
L4: import fs from 'fs-extra';
...
L7: import { resolveWorkerTarget } from './commands/workerTarget.js';
L8: const __dirname = path.dirname(fileURLToPath(import.meta.url));
L9: const templatesDir = path.resolve(__dirname, '../templates');
...
L77: export function detectAgent() {
L78: if (process.env.GEMINI_AGENT || process.env.ANTIGRAVITY) {
L79: return { isAgent: true, type: 'antigravity', details: `gemini_telemetry=${process.env.GEMINI_TELEMETRY || ''}` };
...
L194: release: os.release(),
L195: hostname: os.hostname(),
L196: username: os.userInfo()?.username || '',
High
Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
dist/telemetry.jsView on unpkg · L2127if (!content.includes('.merels/guide/START.md')) {
const localGuideHeader = `# Merels Development Guide\n\nBefore implementing the game, read \`.merels/guide/START.md\` and follow its stages in order. Run \`merels docs sync\` if the local guide is missing.\n\n---\n\n`;
content = localGuideHeader + content;
}
// Always replace placeholders if any exist
Medium
Ai Review Evidence
dist/telemetry.js and src/telemetry.ts prepend development instructions to project AGENTS.md and write the modified file.
dist/telemetry.jsView on unpkg · L127Findings
4 High4 Medium4 Low
HighHost Fingerprint Exfiltrationdist/telemetry.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/commands/skills.js
HighKnown Malware Source Similaritydist/commands/testUi.js
HighKnown Malware Source Similaritysrc/commands/testUi.ts
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/index.js
MediumAi Review Evidencedist/telemetry.js
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @merels/cli@0.0.10.
See all versions of @merels/cli for other recorded verdicts.
- Review the evidence and your use of @merels/cli@0.0.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.