registry / @straion/cli / 0.0.20
@straion/cli@0.0.20
> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).
AI Security Review
scanned 4mo ago · by lpm-firewall-aiThe suspicious primitives are consistent with a Straion CLI: token auth, GraphQL calls, analytics, local config, and opt-in agent setup. Source inspection found no install-time execution, hidden exfiltration, real embedded secret, or unconsented AI-agent control-surface mutation.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs `straion`, `straion login`, `straion setup`, `straion find-rules`, `straion import-rules`, or configured agent session-end hooks.
Impact
Expected product behavior: stores encrypted Straion credentials, writes Straion config/integrations, and optionally records local trajectory JSON; no confirmed unconsented exfiltration or malicious mutation.
Mechanism
User-invoked CLI auth, GraphQL requests, analytics, and optional AI-agent integration hooks
AI rationale
The suspicious primitives are consistent with a Straion CLI: token auth, GraphQL calls, analytics, local config, and opt-in agent setup. Source inspection found no install-time execution, hidden exfiltration, real embedded secret, or unconsented AI-agent control-surface mutation.
Evidence
package.jsondist/cli.jsdist/commands/default.jsdist/commands/login.jsdist/commands/setup.jsdist/auth/credentials.jsdist/auth/graphql-client.jsdist/lib/analytics.jsdist/lib/agent-integrations.jsdist/components/setup/agents/agent-registry.jsdist/agent-integrations/plugins/claude-code/straion-plugin/hooks/session-end.jsdist/agent-integrations/plugins/cursor/straion-plugin/hooks/session-end.js~/.straion/config.json~/.straion/credentials.enc~/.straion/agent-integrations~/.straion/trajectories~/.claude~/.copilot/skills~/.cursor/plugins/local/straion-plugin
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- User-invoked `straion setup` can install AI-agent plugins/hooks under agent config dirs.
- Session-end hook scripts execute `straion trajectory collect` and may read agent transcript paths when `STRAION_TRAJECTORIES_ENABLED=1`.
- CLI reads tokens from `--token`/`STRAION_API_KEY` and stores login credentials under `~/.straion/credentials.enc`.
Evidence against
- `package.json` has no lifecycle scripts; bin is `dist/cli.js` only.
- `dist/components/pat-input.test.js` contains synthetic PAT-looking test strings, not a real embedded secret.
- Network use is package-aligned: GraphQL API defaults to `https://api.straion.app`; analytics uses PostHog host `https://us.i.posthog.com`.
- Agent/plugin installation is behind interactive setup/explicit setup command and selection, not install-time or import-time execution.
- No evidence of broad credential harvesting, destructive behavior, persistence outside declared agent integrations, or hidden payload loading.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
2 flaggeddist/components/pat-input.test.jsView file
45patternName = github_pat
severity = critical
line = 45
matchedText = const re...12';
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/components/pat-input.test.jsView on unpkg · L4545patternName = github_pat
severity = critical
line = 45
matchedText = const re...12';
Critical
Secret Pattern
GitHub personal access token in dist/components/pat-input.test.js
dist/components/pat-input.test.jsView on unpkg · L45Findings
2 Critical1 Medium4 Low
CriticalCritical Secretdist/components/pat-input.test.js
CriticalSecret Patterndist/components/pat-input.test.js
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @straion/cli@0.0.20.
See all versions of @straion/cli for other recorded verdicts.
- Review the evidence and your use of @straion/cli@0.0.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.