@nalvietnam/avatar-cli@3.30.0
AI harness CLI for NAL Vietnam engineering
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe explicit doctor probe forwards an existing token to an unrestricted configurable endpoint, creating conditional credential exposure. This supports a warning under the credential-forwarding policy, but the source does not establish covert or install-triggered theft.
Decision evidence
public snapshot- The doctor probe reads an existing token through token_reader and allows AVATAR_TELEMETRY_URL to replace its default destination.
- The probe sends that token as a Bearer credential in a POST request; the doctor command enables probing by default unless --no-probe is used.
- The postinstall hook imports a welcome-screen module, while the flagged agent-configuration location only checks for Claude project files.
- The token-forwarding behavior is part of the explicitly invoked doctor command, not the install hook.
- The default telemetry destination is telemetry.nal.vn; the unresolved exposure is when a user-configured endpoint overrides it.
Source & flagged code
8 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to @nalvietnam/avatar-cli@3.30.0.
See all versions of @nalvietnam/avatar-cli for other recorded verdicts.
- Review the evidence and your use of @nalvietnam/avatar-cli@3.30.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.