registry / @prefactor/cli / 0.4.1
@prefactor/cli@0.4.1
Prefactor command-line interface
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged process and network behavior belongs to the CLI’s explicit managed-binary install/update workflow, which downloads from the project’s GitHub releases and verifies checksums. The library entry point exports CLI functions without invoking them at import time, and no malicious behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Managed-binary download and execution are triggered by explicit install or update commands; account requests require invoking an API command.
Impact
No unauthorized collection, account action, or automatic execution was identified. An explicit install or update changes the user-local Prefactor installation.
Mechanism
Install and update fetch release assets from GitHub, validate their SHA256 checksum, and manage the Prefactor CLI binary. Account commands use the Prefactor API with user-provided or previously configured credentials.
AI rationale
The flagged process and network behavior belongs to the CLI’s explicit managed-binary install/update workflow, which downloads from the project’s GitHub releases and verifies checksums. The library entry point exports CLI functions without invoking them at import time, and no malicious behavior was found.
Evidence
$HOME/.prefactor/bin/prefactor$HOME/.prefactor/install.json
Network endpoints3
github.com/prefactordev/typescript-sdk/releases/downloadgithub.com/prefactordev/typescript-sdk/releases/latest/downloadapp.prefactorai.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines a CLI binary and a separate library entry point.
- The library entry point exports runCli but does not invoke it automatically.
- Binary installation is registered as an explicit CLI command.
- The installer fetches release assets from the project’s GitHub releases and checks them against a SHA256 manifest.
Evidence against
- The CLI can download, extract, and run its own managed binary during an explicit install or update command.
- The package includes API commands that authenticate with the user’s Prefactor account when invoked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/install/platform.jsView file
1import { execFileSync } from 'node:child_process';
L2: function normalizePlatform(platform) {
High
Child Process
Package source references child process execution.
dist/install/platform.jsView on unpkg · L1dist/bin/cli.cjsView file
495Cross-file remote execution chain: dist/bin/cli.cjs spawns dist/bin/cli.js; helper contains network access plus dynamic code execution.
L495: var import_commander8 = require("commander");
L496: // packages/cli/package.json
L497: var package_default = {
...
L526: type: "git",
L527: url: "git+https://github.com/prefactordev/typescript-sdk.git",
L528: directory: "packages/cli"
...
L558: method: "PUT",
L559: body: { details }
L560: });
...
L694: async function findConfigPath() {
L695: const directoryRoot = await findDirectoryRoot(process.cwd());
L696: const directoryRootConfigPath = import_node_path.resolve(directoryRoot, CONFIG_FILENAME);
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/bin/cli.cjsView on unpkg · L495Findings
1 Critical2 High1 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/install/platform.js
HighCross File Remote Execution Contextdist/bin/cli.cjs
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/bin/cli.js
LowAi Review Evidencedist/bin/cli.js
LowAi Review Evidencedist/bin/cli.js
Affected versions and remediation
This report applies to @prefactor/cli@0.4.1.
See all versions of @prefactor/cli for other recorded verdicts.
- Review the evidence and your use of @prefactor/cli@0.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.