@shipeasy/cli@2.15.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection contradicts the malicious scanner label: there are no lifecycle hooks or covert execution chain. Its explicit agent-wiring and automation capabilities warrant a warning under the stated policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `shipeasy setup`, `shipeasy upgrade`, or `shipeasy setup triggers`.
Impact
Can add project/user agent configuration, install skills, and provision an autonomous PR-producing agent.
Mechanism
User-invoked AI-agent configuration and optional automation provisioning.
AI rationale
Source inspection contradicts the malicious scanner label: there are no lifecycle hooks or covert execution chain. Its explicit agent-wiring and automation capabilities warrant a warning under the stated policy.
Evidence
package.jsonbin/shipeasy.jsdist/index.js~/.config/shipeasy/config.json~/.config/shipeasy/update-check.json.mcp.json.cursor/mcp.json.vscode/mcp.json.github/agents/shipeasy.agent.md
Network endpoints3
mcp.shipeasy.ai/mcpapi.shipeasy.ai/cli/errorsregistry.npmjs.org/@shipeasy/cli/latest
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- `dist/index.js` runs an npm global install of `skills` during explicit setup.
- `shipeasy setup`/trigger commands write MCP and agent configuration for several coding agents.
- Copilot trigger setup can create a repo agent file and set a GitHub agent secret after prompting.
- CLI startup checks npm registry; command errors are posted to Shipeasy with sanitized argv.
Evidence against
- `package.json` has no preinstall/install/postinstall lifecycle hook.
- `bin/shipeasy.js` only invokes the CLI entrypoint.
- Agent/config writes are behind explicit CLI setup, upgrade, or trigger commands.
- No source evidence of credential harvesting, hidden payload execution, or destructive behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @shipeasy/cli@2.8.2
matchedIdentity = npm:QHNoaXBlYXN5L2NsaQ:2.8.2
similarity = 0.960
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg47var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
High
46var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical4 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.15.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.