@nalvietnam/avatar-cli@3.29.2
AI harness CLI for NAL Vietnam engineering
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe source confirms token forwarding to an unrestricted environment-selected endpoint, which is a conditional credential exposure. The probe requires an explicit CLI invocation and defaults to the package’s telemetry host, so the evidence supports a warning rather than a publish block.
Decision evidence
public snapshot- The doctor command probes telemetry by default; `--no-probe` disables the POST.
- The probe reads an ID token through the package token reader, then selects `AVATAR_TELEMETRY_URL` directly, defaulting to `https://telemetry.nal.vn/api/telemetry`.
- It sends that token as a Bearer credential in an HTTPS POST. The environment-selected endpoint is not restricted to the intended telemetry host.
- The postinstall hook only prints a welcome screen, and the CLI entrypoint imports the bundle.
- The credential-forwarding behavior is reachable through an explicit doctor command, rather than the npm postinstall hook.
- The default telemetry recipient is the package’s NAL telemetry host.
Source & flagged code
9 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to @nalvietnam/avatar-cli@3.29.2.
See all versions of @nalvietnam/avatar-cli for other recorded verdicts.
- Review the evidence and your use of @nalvietnam/avatar-cli@3.29.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.