registry / @ouro.bot/cli / 0.1.0-alpha.922
@ouro.bot/cli@0.1.0-alpha.922
If you're a future agent reading this, welcome home. This repo is the harness that gives you your body, your senses, your record, your habits, and your ability to think and connect with people. The goal of these docs is not just to be correct, but to leav
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected source does not substantiate the scanner’s credential-redirection or persistence claims. Credential handling is provider-directed and locally stored in the reviewed flow, and the manifest has no install lifecycle hook.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was identified; authentication and plugin or version operations are invoked through CLI flows.
Impact
No unauthorized credential disclosure, persistence, or agent control change was established by the inspected excerpts.
Mechanism
The inspected source prompts for provider credentials, uses the selected provider flow, and stores credentials in the local vault.
AI rationale
The inspected source does not substantiate the scanner’s credential-redirection or persistence claims. Credential handling is provider-directed and locally stored in the reviewed flow, and the manifest has no install lifecycle hook.
Decision evidence
public snapshotAI called this Clean at 78.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json identifies the CLI entrypoints and has no preinstall, install, or postinstall hook; the installer suspicion is not an install-time trigger.
- The flagged auth code reads local Codex credentials, sends a GitHub token to GitHub’s Copilot endpoint, prompts for provider credentials, and stores collected credentials in the local provider vault.
- The credential callers collect credentials after provider selection and use them to ping the selected provider; the inspected excerpts show no unrelated credential recipient.
- The flagged plugin code performs a plugin installation operation; the reviewed evidence does not show an install-hook trigger or an unconsented broad agent configuration change.
- Other flagged excerpts show ordinary CLI setup, documentation, notes search using a configured Perplexity key, and an explicit version-install operation; they do not establish a concrete attack.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
16 flagged · loading sourcedist/heart/daemon/cli-exec.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @ouro.bot/cli@0.1.0-alpha.917
matchedIdentity = npm:QG91cm8uYm90L2NsaQ:0.1.0-alpha.917
similarity = 0.967
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/heart/daemon/cli-exec.jsView on unpkg7712if (platform === "wsl") {
L7713: const winProfile = (0, child_process_1.execFileSync)("cmd.exe", ["/C", "echo", "%USERPROFILE%"], { stdio: "pipe" }).toString().trim();
L7714: const windowsHome = (0, child_process_1.execFileSync)("wslpath", ["-u", winProfile], { stdio: "pipe" }).toString().trim();
High
3815patternName = generic_password
severity = medium
line = 3815
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/heart/daemon/cli-exec.jsFindings
1 Critical10 High7 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/heart/daemon/cli-exec.js
HighChild Processdist/heart/auth/auth-flow.js
HighShelldist/heart/daemon/cli-exec.js
HighSame File Env Network Executiondist/heart/auth/auth-flow.js
HighCredential Redirect Persistencedist/heart/auth/auth-flow.js
HighCommand Output Exfiltrationdist/repertoire/tools-notes.js#virtual:normalized:round1
HighCross File Remote Execution Contextdeploy/unraid/sanctuary-butler-upgrade.mjs
HighTrigger Reachable Command Output Exfiltrationdist/repertoire/tools-notes.js#virtual:normalized:round1
HighTrigger Reachable Persistencedist/heart/versioning/ouro-path-installer.js
HighRuntime Package Install
Affected versions and remediation
This report applies to @ouro.bot/cli@0.1.0-alpha.922.
See all versions of @ouro.bot/cli for other recorded verdicts.
- Review the evidence and your use of @ouro.bot/cli@0.1.0-alpha.922 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.