@shipeasy/cli@2.17.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection shows an explicit-user-command agent-extension setup capability, not malicious install-time behavior. Warn for the privileged AI-agent configuration surface under the stated policy.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs shipeasy mcp install or shipeasy setup.
Impact
Adds Shipeasy capabilities to selected agent clients; user-level configuration can carry a Shipeasy session bearer.
Mechanism
Explicit AI-agent MCP registration, package installation, and Shipeasy API calls.
AI rationale
Source inspection shows an explicit-user-command agent-extension setup capability, not malicious install-time behavior. Warn for the privileged AI-agent configuration surface under the stated policy.
Evidence
package.jsonbin/shipeasy.jsdist/index.js~/.claude/settings.json~/.cursor/mcp.json~/.codex/config.toml~/.gemini/settings.json~/.gemini/config/mcp_config.json.mcp.json.cursor/mcp.json.gemini/settings.json.claude/settings.local.json~/.config/shipeasy/config.json
Network endpoints6
api.shipeasy.aishipeasy.aimcp.shipeasy.ai/mcpapi.github.com/repos/shipeasy-ai/shipeasyraw.githubusercontent.com/shipeasy-ai/shipeasyregistry.npmjs.org/@shipeasy/cli/latest
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- dist/index.js: mcp install explicitly registers Shipeasy MCP with Claude, Cursor, Codex, Copilot, Antigravity, and Gemini.
- dist/index.js writes user/project AI-agent configuration and may pass its session bearer to user-private configs.
- dist/index.js setup can invoke npm install -g skills and install SDK packages after an explicit setup command.
- dist/index.js reports CLI errors with command data, OS/arch, Node version, and authenticated Shipeasy API access.
Evidence against
- package.json has no preinstall, install, postinstall, or prepare lifecycle hook.
- bin/shipeasy.js only calls run(); behavior starts when the user invokes the CLI.
- MCP/config mutation is behind explicit mcp install or setup commands, with dry-run and scope options.
- Network targets are Shipeasy service endpoints, GitHub skill sources, and npm registry; no credential/file harvesting or remote code execution chain found.
- No eval/vm/native payload loading, stealth persistence, or broad destructive filesystem behavior found.
Behavioral surface
ChildProcess
Source & flagged code
5 flaggeddist/index.jsView file
47var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
High
46var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L4646var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
L59: return import_node_path.default.join(root, "shipeasy", "config.json");
...
L80: const raw = import_node_fs.default.readFileSync(configPath(), "utf-8");
L81: const parsed = JSON.parse(raw);
L82: if (!parsed.project_id || !parsed.cli_token) return null;
...
L272: });
Findings
4 High4 Medium4 Low
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.17.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.17.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.