@slabui/cli@0.2.0
The SlabUI CLI: add, update and compare items from versioned component registries
AI Security Review
scanned 7h ago · by lpm-firewall-aiThe CLI sends its command name to the package’s own registry by default, and the README does not disclose this runtime telemetry. This warrants a warning; no malicious credential collection or unrelated data exfiltration was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
When a CLI command runs and makes a registry request; the CLI’s update check also runs at startup in an interactive terminal outside CI unless disabled.
Impact
The service can associate a user’s CLI command usage with registry requests; no unrelated credential or project data flow was identified.
Mechanism
The CLI records the command name and sends it in the x-slabui-command request header. SLABUI_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 disables that header.
AI rationale
The CLI sends its command name to the package’s own registry by default, and the README does not disclose this runtime telemetry. This warrants a warning; no malicious credential collection or unrelated data exfiltration was identified.
Evidence
dist/index.mjsdist/cli.mjs$XDG_CACHE_HOME/slabui/update-check.json
Network endpoints2
slabui.com/rregistry.npmjs.org/-/package/slabui/dist-tags
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- CLI records the invoked command and includes it in the x-slabui-command header on registry requests by default; an environment-variable opt-out is available.
- The README does not disclose this runtime command telemetry.
- The CLI also checks npm for updates when started in an interactive terminal, unless disabled or running in CI.
Evidence against
- The command header is sent to the package’s SlabUI registry, and the CLI offers SLABUI_TELEMETRY_DISABLED or DO_NOT_TRACK as opt-outs.
- No lifecycle scripts are declared; the package exposes a library entry point and a CLI.
- The reviewed credential flow uses a SlabUI token for Pro registry requests or explicit login.
Behavioral surface
ChildProcessEnvironmentVars
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/index.mjsView file
1import{createHash as e,randomBytes as t}from"node:crypto";import{z as n}from"zod";import{homedir as r,hostname as i}from"node:os";import a from"node:path";import{access as o,lstat ...
L2: `,f.append(_.decl({prop:`--${u}`,value:l,raws:{before:`
High
1import{createHash as e,randomBytes as t}from"node:crypto";import{z as n}from"zod";import{homedir as r,hostname as i}from"node:os";import a from"node:path";import{access as o,lstat ...
L2: `,f.append(_.decl({prop:`--${u}`,value:l,raws:{before:`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L11import{createHash as e,randomBytes as t}from"node:crypto";import{z as n}from"zod";import{homedir as r,hostname as i}from"node:os";import a from"node:path";import{access as o,lstat ...
L2: `,f.append(_.decl({prop:`--${u}`,value:l,raws:{before:`
...
L84: `)),`merged`;let g=l?await l(e):`markers`;return g===`local`?`kept`:g===`remote`?(await m(n),`updated`):(await m(h.result.join(`
L85: `)),`conflict`)}async function xn({token:e,fetch:t=globalThis.fetch,env:n=process.env,file:r=A(n)}){let i=Y(void 0,n),a;try{a=await ie({registryUrl:i.url,token:e,fetch:t,headers:Oe...
L86: //# sourceMappingURL=index.mjs.map
Findings
3 High6 Medium3 Low
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighSandbox Evasion Gated Capabilitydist/index.mjs
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/cli.mjs
MediumAi Review Evidencedist/index.mjs
MediumAi Review Evidencedist/index.mjs
MediumAi Review Evidencedist/cli.mjs
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @slabui/cli@0.2.0.
See all versions of @slabui/cli for other recorded verdicts.
- Review the evidence and your use of @slabui/cli@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.