@solidactions/cli@3.20.0
SolidActions CLI - Deploy and manage workflow automation
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI performs an automatic, periodic update check against the npm registry and identifies itself in the request. Because this runtime network activity is not clearly disclosed, classify it as suspicious telemetry; the inspected request contains no project or credential data.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI startup, when the update cache is stale or absent and the suppression environment variable is unset.
Impact
The registry receives the request and can observe its network metadata, including the CLI update-check user agent; no project or credential data was found in the request.
Mechanism
A detached worker requests the latest package version from the npm registry with a package-identifying user agent.
AI rationale
The CLI performs an automatic, periodic update check against the npm registry and identifies itself in the request. Because this runtime network activity is not clearly disclosed, classify it as suspicious telemetry; the inspected request contains no project or credential data.
Evidence
dist/index.jsdist/utils/agent-freshness.jsdist/utils/agent-update-worker.js~/.solidactions/agent-update-check.json~/.solidactions/agent-update-check.json.claim
Network endpoints1
registry.npmjs.org/@solidactions%2Fcli/latest
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The CLI entry point starts agent freshness checks whenever it runs as the process entry point.
- When the update cache needs refreshing, the package starts a detached update-check worker.
- The worker requests the latest @solidactions/cli version from registry.npmjs.org and sends the user agent '@solidactions/cli update check'.
- The update check is suppressed by SOLIDACTIONS_NO_AGENT_NUDGES=1.
Evidence against
- The request supports a normal CLI update check and targets the npm registry.
- The inspected request sends no project contents, credentials, or environment values.
- Other process execution is tied to explicit developer commands such as running a skill command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/utils/source-provenance.jsView file
19const path_1 = __importDefault(require("path"));
L20: const child_process_1 = require("child_process");
L21: const form_data_1 = __importDefault(require("form-data"));
High
Child Process
Package source references child process execution.
dist/utils/source-provenance.jsView on unpkg · L19dist/commands/skill-run.jsView file
40* quote-stripping); joining those words back together with bare spaces and
L41: * handing them to `sh -c` would let the inner shell reinterpret any
L42: * metacharacters they contain (spaces, quotes, parens, `&&`, ...). Quoting
High
dist/index.jsView file
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/commands/dev.js
HighChild Processdist/utils/source-provenance.js
HighShelldist/commands/skill-run.js
HighRuntime Package Installdist/commands/dev.js
HighSemantic Analysis Limiteddist/commands/deploy.js#virtual:normalized:round1
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @solidactions/cli@3.20.0.
See all versions of @solidactions/cli for other recorded verdicts.
- Review the evidence and your use of @solidactions/cli@3.20.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.