registry / @p4code/cli / 0.8.12
@p4code/cli@0.8.12
P4 Code coding agent server and command-line client
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the reviewed worker and agent-configuration locations show expected CLI and provider integration behavior. Scanner flags alone do not establish malicious behavior; the inspected source does not support a concrete attack finding.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the p4c CLI or its session-history worker.
Impact
No malicious effect was established from the inspected behavior.
Mechanism
The worker validates its history options and dispatches to session-message retrieval or session forking.
AI rationale
The manifest has no install lifecycle hook, and the reviewed worker and agent-configuration locations show expected CLI and provider integration behavior. Scanner flags alone do not establish malicious behavior; the inspected source does not support a concrete attack finding.
Decision evidence
public snapshotAI called this Clean at 76.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json declares a CLI entry point and no lifecycle scripts; the package has no automatic install hook.
- The Claude history worker accepts a session ID and limited history options, then dispatches only session-message retrieval or session forking.
- The worker’s Claude environment lookup reads the Claude configuration directory and project directory name; the inspected code does not establish credential transfer to an unrelated recipient.
- The runtime describes a P4-owned MCP and plugin registry and says provider configuration is read for import.
- The other required files are bundled Effect, schema, client asset, and stdio bridge code; their inspected excerpts do not establish attack behavior.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
14 flagged · loading sourcedist/runtime-2Dbe0RYi.mjsView file
7859patternName = generic_password
severity = medium
line = 7859
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/runtime-2Dbe0RYi.mjsView on unpkg · L7859dist/AcpMcpStdioBridge-BL9bAh79.mjsView file
4import { A as fromIterable, E as fromAsyncIterable, G as mapEffect, Nn as awaitAll, Pn as await_, Pt as unwrap, dt as runForEach, p as empty, st as runCollect } from "./Stream-CX7G...
L5: import * as NodeChildProcess from "node:child_process";
L6: import * as NodeReadline from "node:readline";
High
Child Process
Package source references child process execution.
dist/AcpMcpStdioBridge-BL9bAh79.mjsView on unpkg · L4dist/claudeHistoryWorker-BvaF6m2o.mjsView file
Findings
2 Critical7 High8 Medium4 Low
CriticalCredential Exfiltrationdist/claudeHistoryWorker-BvaF6m2o.mjs
CriticalReverse Shelldist/claudeHistoryWorker-BvaF6m2o.mjs
HighChild Processdist/AcpMcpStdioBridge-BL9bAh79.mjs
HighShell
HighEvaldist/claudeHistoryWorker-BvaF6m2o.mjs
HighCommand Output Exfiltrationdist/claudeHistoryWorker-BvaF6m2o.mjs
HighCloud Metadata Accessdist/claudeHistoryWorker-BvaF6m2o.mjs
HighObfuscated Payload Loaderdist/claudeHistoryWorker-BvaF6m2o.mjs
HighRemote Agent Bridgedist/claudeHistoryWorker-BvaF6m2o.mjs
MediumSecret Patterndist/runtime-2Dbe0RYi.mjs
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @p4code/cli@0.8.12.
See all versions of @p4code/cli for other recorded verdicts.
- Review the evidence and your use of @p4code/cli@0.8.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.