@shipeasy/cli@2.4.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 4mo ago · by lpm-firewall-aiScanner signals are explained by package-aligned CLI functionality, with no install-time execution, credential harvesting, remote code execution, or unconsented foreign agent control-surface mutation. Because it deliberately provisions coding-agent integrations and unattended workflows when invoked, classify as suspicious/warn rather than malicious/block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit user CLI commands such as shipeasy setup, shipeasy mcp install, docs skill --install, or ops trigger prep
Impact
Can modify project/user agent configs and create instructions for scheduled coding-agent PR workflows when the user opts in.
Mechanism
user-invoked AI-agent MCP/skill/trigger provisioning
Policy narrative
Static inspection shows a legitimate Shipeasy CLI with powerful, explicit onboarding flows. It can register MCP servers, write agent instruction files, fetch/install Shipeasy skills, persist SDK keys to gitignored env files, and prepare scheduled coding-agent workflows. These actions are not lifecycle-triggered and are tied to documented CLI commands, but the agent automation surface warrants a warning.
AI rationale
Scanner signals are explained by package-aligned CLI functionality, with no install-time execution, credential harvesting, remote code execution, or unconsented foreign agent control-surface mutation. Because it deliberately provisions coding-agent integrations and unattended workflows when invoked, classify as suspicious/warn rather than malicious/block.
Evidence
package.jsonbin/shipeasy.jsdist/index.js~/.config/shipeasy/config.json.shipeasy.mcp.json.cursor/mcp.json.cursor/rules/shipeasy.mdc.vscode/mcp.json.github/copilot-instructions.mdAGENTS.md.claude/skillsshipeasy-wiring.md.env.env.local.gitignore
Network endpoints7
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- dist/index.js registers MCP/instruction files for Claude/Cursor/Codex/Copilot via explicit setup/mcp commands
- dist/index.js can install fetched Shipeasy skills using npx skills add during setup/docs skill --install
- dist/index.js trigger prep builds unattended agent routine prompts with ops keys and latest plugin/CLI refresh
- dist/index.js reports sanitized CLI parse errors to /cli/errors with platform/node/version metadata
Evidence against
- package.json has no npm lifecycle hooks; bin only runs ./bin/shipeasy.js on user invocation
- bin/shipeasy.js only requires dist/index.js and calls run()
- Agent config writes are explicit CLI flows with --dry-run/project/user scope handling, not install-time mutation
- Credentials are read from SHIPEASY_* or ~/.config/shipeasy/config.json for package-aligned API calls
- No eval/vm/native binary loading found; child_process calls are for documented agent/package-manager/git/CLI operations
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @shipeasy/cli@2.3.0
matchedIdentity = npm:QHNoaXBlYXN5L2NsaQ:2.3.0
similarity = 0.960
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg46var import_node_http = __toESM(require("http"));
L47: var import_node_child_process = require("child_process");
L48:
High
45var import_node_crypto = __toESM(require("crypto"));
L46: var import_node_http = __toESM(require("http"));
L47: var import_node_child_process = require("child_process");
L48:
...
L55: function configPath() {
L56: const xdg = process.env.XDG_CONFIG_HOME;
L57: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical3 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.4.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.