@shipeasy/cli@2.16.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is an explicit-user-command, same-vendor agent integration rather than install-time malware. Warn for the broad AI-agent configuration capability and bearer propagation.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs `shipeasy setup`, `shipeasy mcp install`, or `shipeasy upgrade`.
Impact
Adds a remote MCP capability to selected/default detected agent clients; private user configs can receive the CLI session bearer token.
Mechanism
User-invoked AI-agent MCP/skill configuration and update actions.
AI rationale
This is an explicit-user-command, same-vendor agent integration rather than install-time malware. Warn for the broad AI-agent configuration capability and bearer propagation.
Evidence
package.jsonbin/shipeasy.jsdist/index.js~/.claude/settings.json~/.cursor/mcp.json~/.codex/config.toml.mcp.json.cursor/mcp.json.gemini/settings.json.vscode/mcp.json
Network endpoints3
mcp.shipeasy.ai/mcpapi.shipeasy.ai/cli/errorsregistry.npmjs.org/@shipeasy/cli/latest
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- dist/index.js: `mcp install` defaults to all detected AI clients and writes/registers a Shipeasy MCP server.
- dist/index.js: explicit setup/upgrade commands invoke agent CLIs and can install/refresh skills or the CLI.
- dist/index.js: user-scope MCP entries may carry the stored Shipeasy bearer token.
- dist/index.js: error reporting sends OS platform/architecture and sanitized CLI errors to the Shipeasy API.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- bin/shipeasy.js only invokes the bundled CLI after a user runs the binary.
- Agent-config mutation is behind explicit `setup`, `mcp install`, or `upgrade` commands.
- No eval, remote code download-and-execute chain, credential harvesting, or destructive broad file operation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
5 flaggeddist/index.jsView file
47var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
High
46var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L4646var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
L59: return import_node_path.default.join(root, "shipeasy", "config.json");
...
L80: const raw = import_node_fs.default.readFileSync(configPath(), "utf-8");
L81: const parsed = JSON.parse(raw);
L82: if (!parsed.project_id || !parsed.cli_token) return null;
...
L272: });
Findings
4 High4 Medium4 Low
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.16.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.