@slabui/cli@0.1.0
The SlabUI CLI: add, update and compare items from versioned component registries
AI Security Review
scanned 22h ago · by lpm-firewall-aiThe CLI sends undisclosed runtime telemetry containing the invoked command name to its registry service. An opt-out exists, and the reviewed flow does not include credentials or project contents, so this warrants a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
A CLI command makes a registry request; the header is sent by default unless an opt-out environment variable is set.
Impact
The service can learn which CLI command was used. No credential or project-content collection was identified in this flow.
Mechanism
The client adds the command name in the x-slabui-command header. SLABUI_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 suppresses it.
AI rationale
The CLI sends undisclosed runtime telemetry containing the invoked command name to its registry service. An opt-out exists, and the reviewed flow does not include credentials or project contents, so this warrants a warning rather than a publish block.
Evidence
dist/cli.mjsREADME.md
Network endpoints2
slabui.com/rregistry.npmjs.org/-/package/slabui/dist-tags
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The CLI adds the invoked command name to an `x-slabui-command` request header unless telemetry is disabled with `SLABUI_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1`.
- The client sends that header with its network requests. The header reports a command name, not credentials or project contents.
- The README describes the CLI commands but does not disclose this command reporting.
Evidence against
- The package presents itself as a CLI for managing SlabUI component registries.
- The command header has an opt-out, and the reviewed code does not show it collecting credentials or project contents for telemetry.
Behavioral surface
ChildProcessEnvironmentVars
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/index.mjsView file
1import{createHash as e,randomBytes as t}from"node:crypto";import{z as n}from"zod";import{homedir as r,hostname as i}from"node:os";import a from"node:path";import{access as o,lstat ...
L2: `,f.append(_.decl({prop:`--${u}`,value:l,raws:{before:`
High
1import{createHash as e,randomBytes as t}from"node:crypto";import{z as n}from"zod";import{homedir as r,hostname as i}from"node:os";import a from"node:path";import{access as o,lstat ...
L2: `,f.append(_.decl({prop:`--${u}`,value:l,raws:{before:`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L11import{createHash as e,randomBytes as t}from"node:crypto";import{z as n}from"zod";import{homedir as r,hostname as i}from"node:os";import a from"node:path";import{access as o,lstat ...
L2: `,f.append(_.decl({prop:`--${u}`,value:l,raws:{before:`
...
L24: `)),`merged`;let g=l?await l(e):`markers`;return g===`local`?`kept`:g===`remote`?(await m(n),`updated`):(await m(h.result.join(`
L25: `)),`conflict`)}async function Ht({token:e,fetch:t=globalThis.fetch,env:n=process.env,file:r=A(n)}){let i=J(void 0,n),a;try{a=await ie({registryUrl:i.url,token:e,fetch:t,headers:Ee...
L26: //# sourceMappingURL=index.mjs.map
Findings
3 High5 Medium3 Low
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighSandbox Evasion Gated Capabilitydist/index.mjs
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/cli.mjs
MediumAi Review Evidencedist/cli.mjs
MediumAi Review EvidenceREADME.md
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @slabui/cli@0.1.0.
See all versions of @slabui/cli for other recorded verdicts.
- Review the evidence and your use of @slabui/cli@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.