registry / @prefactor/cli / 0.6.0
@prefactor/cli@0.6.0
Prefactor command-line interface
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe reviewed behavior matches a Prefactor CLI: authentication and API calls use the selected service, while installation and updates require explicit commands. The hostname and platform are sent as login metadata during that user-invoked flow.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Network requests occur when the user runs CLI commands such as login, install, or update; no install hook was found.
Impact
No automatic credential theft, unrelated data transfer, or unrequested account action was identified.
Mechanism
Login uses the selected service base URL, and the updater downloads project releases from GitHub and checks their SHA-256 checksum.
AI rationale
The reviewed behavior matches a Prefactor CLI: authentication and API calls use the selected service, while installation and updates require explicit commands. The hostname and platform are sent as login metadata during that user-invoked flow.
Network endpoints2
app.prefactorai.comgithub.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI binary and library entry points, with no install lifecycle script.
- Install and update are explicit CLI commands; the updater downloads releases from the project’s GitHub releases and verifies their SHA-256 checksum.
- Authenticated API clients use a selected profile or PREFACTOR_API_TOKEN with its configured base URL.
- The login command sends client version, platform, and hostname to the selected service’s login endpoint only when the user runs `prefactor login`.
- No automatic credential collection, unrelated data transfer, or unrequested account action was identified.
Evidence against
- The explicit login flow includes the machine hostname and platform in its request metadata.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/install/platform.jsView file
1import { execFileSync } from 'node:child_process';
L2: function normalizePlatform(platform) {
High
Child Process
Package source references child process execution.
dist/install/platform.jsView on unpkg · L1dist/bin/cli.cjsView file
495Cross-file remote execution chain: dist/bin/cli.cjs spawns dist/bin/cli.js; helper contains network access plus dynamic code execution.
L495: var import_commander13 = require("commander");
L496: // packages/cli/package.json
L497: var package_default = {
...
L526: type: "git",
L527: url: "git+https://github.com/prefactordev/typescript-sdk.git",
L528: directory: "packages/cli"
...
L558: method: "PUT",
L559: body: { details }
L560: });
...
L694: async function findConfigPath() {
L695: const directoryRoot = await findDirectoryRoot(process.cwd());
L696: const directoryRootConfigPath = import_node_path.resolve(directoryRoot, CONFIG_FILENAME);
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/bin/cli.cjsView on unpkg · L495Findings
1 Critical2 High1 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/install/platform.js
HighCross File Remote Execution Contextdist/bin/cli.cjs
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/commands/lifecycle.js
LowAi Review Evidencedist/install/release.js
LowAi Review Evidencedist/install/installer.js
LowAi Review Evidencedist/commands/shared.js
Affected versions and remediation
This report applies to @prefactor/cli@0.6.0.
See all versions of @prefactor/cli for other recorded verdicts.
- Review the evidence and your use of @prefactor/cli@0.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.