@share-crm/sharedev-cli@0.0.4-rc.34
sharedev command line tool
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner's install-time and credential-redirection claims were not confirmed. The confirmed risk is an explicit-user-command remote agent-template installer that can modify multiple project-local AI-agent control surfaces.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs `sharedev spec init`, `sharedev spec update`, or the CLI's interactive initialization flow selecting spec setup.
Impact
A compromised remote host or manifest could place attacker-controlled agent instructions in selected or existing project-local AI-agent directories.
Mechanism
Remote manifest/archive download and extraction into agent skill folders.
AI rationale
The scanner's install-time and credential-redirection claims were not confirmed. The confirmed risk is an explicit-user-command remote agent-template installer that can modify multiple project-local AI-agent control surfaces.
Evidence
package.jsonbin/cli.mjsdist/sharedev.js.agents.claude.codex.cursor.qoder.trae.workbuddy.sharedev/settings.json
Network endpoints2
developer.fxiaoke.com/sharedev/sharecrm-skills-kit.jsondeveloper.fxiaoke.com/sharedev
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `spec init` downloads a remote manifest/archive and installs it into selected AI-agent skill directories.
- `spec update` auto-detects existing agent skill folders and refreshes them from the remote archive.
- Downloaded archive contents are extracted without an integrity hash or signature check.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The mutation is reached through documented `sharedev spec init`/`update` commands; init prompts for agent choice and existing-directory overwrite unless `--force` is supplied.
- No source evidence of credential harvesting, exfiltration, shell execution, or hidden persistence was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/sharedev.jsView file
554typeof Buffer.alloc === "function" &&
L555: typeof Buffer.from === "function";
L556:
...
L769: if (typeof stream == 'undefined') {
L770: this.end();
L771: return;
...
L1020:
L1021: // Is webkit? http://stackoverflow.com/a/16459606/376773
L1022: // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632
...
L1088: * @param {String} namespaces
L1089: * @api private
L1090: */
Critical
Download Execute
Source downloads or fetches remote code and executes it.
dist/sharedev.jsView on unpkg · L554554Trigger-reachable chain: manifest.main -> dist/sharedev.js
L554: typeof Buffer.alloc === "function" &&
L555: typeof Buffer.from === "function";
L556:
...
L769: if (typeof stream == 'undefined') {
L770: this.end();
L771: return;
...
L1020:
L1021: // Is webkit? http://stackoverflow.com/a/16459606/376773
L1022: // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632
...
L1088: * @param {String} namespaces
L1089: * @api private
L1090: */
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/sharedev.jsView on unpkg · L55424577
Findings
2 Critical4 High2 Medium5 Low
CriticalDownload Executedist/sharedev.js
CriticalTrigger Reachable Dangerous Capabilitydist/sharedev.js
HighChild Processdist/sharedev.js
HighCredential Redirect Persistencedist/sharedev.js
HighEntrypoint Foreign Package Code Overwritedist/sharedev.js
HighSemantic Analysis Limiteddist/sharedev.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @share-crm/sharedev-cli@0.0.4-rc.34.
See all versions of @share-crm/sharedev-cli for other recorded verdicts.
- Review the evidence and your use of @share-crm/sharedev-cli@0.0.4-rc.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.