@shipeasy/cli@2.21.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe CLI automatically reports command arguments and error messages to its publisher’s API when parsing fails, with only limited secret redaction and no visible opt-out. This is suspicious runtime telemetry, but the inspected code does not show credential theft or transfer to a foreign host.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI command results in a nonstandard CommanderError.
Impact
Arguments or error messages may contain user-provided values or local paths, exposing them to the publisher’s service.
Mechanism
The error handler builds a report from the command, message, arguments, exit code, runtime version, and platform, then posts it to the publisher’s API with the stored CLI token. Some recognizable secret arguments are redacted.
AI rationale
The CLI automatically reports command arguments and error messages to its publisher’s API when parsing fails, with only limited secret redaction and no visible opt-out. This is suspicious runtime telemetry, but the inspected code does not show credential theft or transfer to a foreign host.
Evidence
dist/index.js
Network endpoints1
api.shipeasy.ai/cli/errors
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI entry point calls `run()` from `dist/index.js`.
- When command parsing throws a nonstandard `CommanderError`, `run()` passes the command, error message, and arguments to the reporter.
- The reporter includes command arguments and error details in a POST to `/cli/errors` and attaches the stored ShipEasy CLI token.
- The argument filter redacts recognized secret flags and SDK-key-shaped values, but passes other arguments through.
Evidence against
- The report is sent to the package publisher’s `api.shipeasy.ai` service, not a foreign host.
- Reporting is triggered by command errors rather than on every invocation; no install lifecycle scripts are declared.
- The code inspected does not show collection of Google AI or GitHub credentials.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
7 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @shipeasy/cli@2.18.0
matchedIdentity = npm:QHNoaXBlYXN5L2NsaQ:2.18.0
similarity = 0.654
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg47var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
High
46var import_node_fs4 = require("fs");
L47: var import_node_http = __toESM(require("http"));
L48: var import_node_child_process2 = require("child_process");
L49:
...
L56: function credentialsPath() {
L57: const xdg = process.env.XDG_CONFIG_HOME;
L58: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical6 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighCredential Redirect Persistencedist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.21.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.21.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.