@shipeasy/cli@2.8.0
CLI for the Shipeasy platform (flags, experiments, translations, bugs)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection confirms explicit-user-command agent configuration and update behavior, but no unconsented install-time persistence, credential theft, or remote code execution chain. Warn for the meaningful agent-control capability.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs shipeasy setup or shipeasy upgrade.
Impact
Can add Shipeasy MCP access and marketplace skills to selected or auto-detected agent environments.
Mechanism
user-invoked agent wiring, remote skill installation, and self-update
AI rationale
Source inspection confirms explicit-user-command agent configuration and update behavior, but no unconsented install-time persistence, credential theft, or remote code execution chain. Warn for the meaningful agent-control capability.
Evidence
package.jsonbin/shipeasy.jsdist/index.js~/.claude/settings.json.mcp.json~/.cursor/mcp.json.cursor/mcp.json.vscode/mcp.json~/.config/shipeasy/config.json~/.config/shipeasy/update-check.json
Network endpoints3
api.shipeasy.aimcp.shipeasy.ai/mcpregistry.npmjs.org/@shipeasy/cli/latest
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- dist/index.js:1123 registers a remote MCP server into Claude/Cursor/Copilot/Codex configuration.
- dist/index.js:1163 and 1399 install a Claude plugin and fetch/install marketplace skills.
- dist/index.js:5771 self-updates the global CLI; SDK updates run only after prompt or --yes.
- dist/index.js:6395 sends sanitized CLI error telemetry with platform metadata.
Evidence against
- package.json has no preinstall/install/postinstall lifecycle hook.
- bin/shipeasy.js only invokes run(); agent and update mutations are command handlers.
- dist/index.js:6595 only checks npm for updates and caches the result on CLI invocation.
- Credential requests target declared Shipeasy API endpoints; no host fingerprint harvesting was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @shipeasy/cli@2.6.0
matchedIdentity = npm:QHNoaXBlYXN5L2NsaQ:2.6.0
similarity = 0.960
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg46var import_node_http = __toESM(require("http"));
L47: var import_node_child_process = require("child_process");
L48:
High
45var import_node_crypto = __toESM(require("crypto"));
L46: var import_node_http = __toESM(require("http"));
L47: var import_node_child_process = require("child_process");
L48:
...
L55: function configPath() {
L56: const xdg = process.env.XDG_CONFIG_HOME;
L57: const root = xdg ? xdg : import_node_path.default.join(import_node_os.default.homedir(), ".config");
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical4 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighHost Fingerprint Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
MediumDynamic Requirebin/shipeasy.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @shipeasy/cli@2.8.0.
See all versions of @shipeasy/cli for other recorded verdicts.
- Review the evidence and your use of @shipeasy/cli@2.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.