registry / @share-crm/sharedev-cli / 0.0.4-rc.43
@share-crm/sharedev-cli@0.0.4-rc.43
sharedev command line tool
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is an explicit-user-command, first-party agent extension setup rather than an install-time malicious chain. It remains a real supply-chain risk because remotely selected, unchecked content is unpacked into AI-agent directories.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs sharedev init with an agent or runs sharedev spec init/update.
Impact
A compromised vendor archive could modify project-level AI-agent instructions or extensions.
Mechanism
Remote archive download and extraction into agent skill directories.
AI rationale
This is an explicit-user-command, first-party agent extension setup rather than an install-time malicious chain. It remains a real supply-chain risk because remotely selected, unchecked content is unpacked into AI-agent directories.
Evidence
dist/sharedev.js.agents.claude.codex.cursor.sharedev/settings.json
Network endpoints3
developer.fxiaoke.com/sharedev/sharecrm-skills-kit.jsondeveloper.fxiaoke.com/sharedevdcx.fxiaoke.com/web/log/get/1.gif
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The explicit spec setup feature downloads a remotely named archive and extracts it into agent skill directories.
- Supported targets include project-level Codex, Claude Code, and Cursor directories, so a changed remote archive can alter agent instructions or extensions.
- The CLI sends operational telemetry, including configured developer identity fields, to a vendor endpoint.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The agent-directory mutation is reached through explicit sharedev init/spec actions, not package installation.
- The configured certificate is used as authorization for the user-supplied enterprise domain; no fixed credential gateway was found.
- No shell execution, eval, or downloaded-code execution was found in the inspected package code.
Behavioral surface
CryptoEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/sharedev.jsView file
524typeof Buffer.alloc === "function" &&
L525: typeof Buffer.from === "function";
L526:
...
L739: if (typeof stream == 'undefined') {
L740: this.end();
L741: return;
...
L990:
L991: // Is webkit? http://stackoverflow.com/a/16459606/376773
L992: // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632
...
L1058: * @param {String} namespaces
L1059: * @api private
L1060: */
Critical
Download Execute
Source downloads or fetches remote code and executes it.
dist/sharedev.jsView on unpkg · L524524Trigger-reachable chain: manifest.main -> dist/sharedev.js
L524: typeof Buffer.alloc === "function" &&
L525: typeof Buffer.from === "function";
L526:
...
L739: if (typeof stream == 'undefined') {
L740: this.end();
L741: return;
...
L990:
L991: // Is webkit? http://stackoverflow.com/a/16459606/376773
L992: // document is undefined in react-native: https://github.com/facebook/react-native/pull/1632
...
L1058: * @param {String} namespaces
L1059: * @api private
L1060: */
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/sharedev.jsView on unpkg · L524•
Findings
3 Critical2 High2 Medium5 Low
CriticalDownload Executedist/sharedev.js
CriticalTrigger Reachable Dangerous Capabilitydist/sharedev.js
CriticalPrevious Version Dangerous Deltadist/sharedev.js
HighCredential Redirect Persistencedist/sharedev.js
HighSemantic Analysis Limiteddist/sharedev.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @share-crm/sharedev-cli@0.0.4-rc.43.
See all versions of @share-crm/sharedev-cli for other recorded verdicts.
- Review the evidence and your use of @share-crm/sharedev-cli@0.0.4-rc.43 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.