registry / @sitecoreai-labs/sitecoreai-cli / 0.14.0

@sitecoreai-labs/sitecoreai-cli@0.14.0

SitecoreAI developer toolkit — a native TypeScript CLI, SDK, and MCP server for deploy, serialization, recipes, publishing, and content operations.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 682 file(s), 4.06 MB of source, external domains: 127.0.0.1, acme.example, api-docs.sitecore.com, api.sitecorecloud.io, auth.sitecorecloud.io, ci.example.com, cli-telemetry.sitecoreai.dev, cm.example, doc.sitecore.com, edge-platform.sitecorecloud.io, example.com, github.com, json.schemastore.org, mms-delivery.sitecorecloud.io, platform-inventory.sitecorecloud.io, schemas.sitecoreai.dev, www.dot.nm.gov, xmapps-api.sitecorecloud.io, xmcloud-monitoring-api.sitecorecloud.io, xmclouddeploy-api.sitecorecloud.io, your-cdn.example

Source & flagged code

3 flagged

dist/mcp/resources/recipes.jsView file

Lines 67-107javascript

67 "PreviousStateId": "{...}", "PreviousStateName": "Draft",

68 "NewStateId": "{...}", "NewStateName": "In Review",

69 "CommandId": "{...}", "CommandName": "Submit",

70 "Comments": "...",

71 "User": { "Name": "sitecore\\\\admin", "Email": "..." },

72 "Timestamp": "2026-05-14T12:34:56Z"

73}

74\`\`\`

76Field names + casing have shifted between Sitecore versions. Log the

77first real call your endpoint receives and pin schema validators

78accordingly.

80## Authorization types

82Three auth types ship with Sitecore. Recipe shape and wire behavior:

84| Type | Recipe \`auth\` object | Wire behavior |

85| --- | --- | --- |

86| \`ApiKey\` | \`{ type, headerName, key: "$ENV:VAR" }\` | Adds a custom header per the configured name. |

87| \`Basic\` | \`{ type, username, password: "$ENV:VAR" }\` | Adds \`Authorization: Basic <base64>\`. |

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/mcp/resources/recipes.jsView on unpkg · L87

88| \`OAuth2ClientCredentialsGrant\` | \`{ type, tokenEndpoint, clientId, clientSecret: "$ENV:VAR", scope?, audience? }\` | Mints a token; sets \`Authorization: Bearer\`. Sitecore-side caching is undocumented — assume per-fire mint. |

90Secrets are always \`$ENV:VAR_NAME\` references. The recipe file never

91carries plaintext credentials; the executor resolves at apply time.

92Missing env vars surface as a plan-phase error.

94Actions reference an Authorization via either \`authorizationRef\`

95(handle of a webhook-authorization recipe pushed in the same set) OR

96\`authorizationPath\` (absolute path to an existing tenant item). Use

97exactly one per action.

99## Recipe shapes

100

101### \`workflow\`

102

103\`\`\`ts

104{

105 kind: "workflow",

106 schemaVersion: "1",

107 handle: "blog-article-approval@1",

dist/publishing/job-watcher.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.throwOnTerminalFailure = exports.printJobSummary = exports.watchPublishJob = exports.clampPollInterval = exports.DEFAULT_WATCH_TIMEOUT_S = exports.

dist/recipe/sandbox/load.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sitecoreai-labs/sitecoreai-cli@0.13.3 matchedIdentity = npm:[redacted]:0.13.3 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/recipe/sandbox/load.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/mcp/resources/recipes.jsView file

87patternName = generic_password severity = medium line = 87 matchedText = | \`Basi...`. |

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/mcp/resources/recipes.jsView on unpkg · L87

dist/publishing/job-watcher.jsView file

3exports.throwOnTerminalFailure = exports.printJobSummary = exports.watchPublishJob = exports.clampPollInterval = exports.DEFAULT_WATCH_TIMEOUT_S = exports.DEFAULT_POLL_INTERVAL_S =... L4: const errors_1 = require("../shared/errors"); L5: const client_1 = require("./api/client");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/publishing/job-watcher.jsView on unpkg · L3

dist/recipe/sandbox/load.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/recipe/sandbox/load.jsView on unpkg

Findings

1 High5 Medium5 Low

HighPrevious Version Dangerous Deltadist/recipe/sandbox/load.js

MediumSecret Patterndist/mcp/resources/recipes.js

MediumDynamic Requiredist/publishing/job-watcher.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/mcp/resources/recipes.jsView file

Lines 67-107javascript

67 "PreviousStateId": "{...}", "PreviousStateName": "Draft",

68 "NewStateId": "{...}", "NewStateName": "In Review",

69 "CommandId": "{...}", "CommandName": "Submit",

70 "Comments": "...",

71 "User": { "Name": "sitecore\\\\admin", "Email": "..." },

72 "Timestamp": "2026-05-14T12:34:56Z"

73}

74\`\`\`

76Field names + casing have shifted between Sitecore versions. Log the

77first real call your endpoint receives and pin schema validators

78accordingly.

80## Authorization types

82Three auth types ship with Sitecore. Recipe shape and wire behavior:

84| Type | Recipe \`auth\` object | Wire behavior |

85| --- | --- | --- |

86| \`ApiKey\` | \`{ type, headerName, key: "$ENV:VAR" }\` | Adds a custom header per the configured name. |

87| \`Basic\` | \`{ type, username, password: "$ENV:VAR" }\` | Adds \`Authorization: Basic <base64>\`. |

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/mcp/resources/recipes.jsView on unpkg · L87

90Secrets are always \`$ENV:VAR_NAME\` references. The recipe file never

91carries plaintext credentials; the executor resolves at apply time.

92Missing env vars surface as a plan-phase error.

94Actions reference an Authorization via either \`authorizationRef\`

95(handle of a webhook-authorization recipe pushed in the same set) OR

96\`authorizationPath\` (absolute path to an existing tenant item). Use

97exactly one per action.

99## Recipe shapes

100

101### \`workflow\`

102

103\`\`\`ts

104{

105 kind: "workflow",

106 schemaVersion: "1",

107 handle: "blog-article-approval@1",

dist/publishing/job-watcher.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.throwOnTerminalFailure = exports.printJobSummary = exports.watchPublishJob = exports.clampPollInterval = exports.DEFAULT_WATCH_TIMEOUT_S = exports.

dist/recipe/sandbox/load.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/recipe/sandbox/load.jsView on unpkg