@straion/cli@0.1.0
> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a user-invoked agent configuration capability with local transcript handling, so it warrants a warning under the agent-control policy. The inspected metadata contains no lifecycle script, and no concrete malicious behavior was established.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the setup command or enables the trajectory collection feature.
Impact
Agent configuration and local transcript-derived data may be changed or created after explicit user invocation; no covert installation or exfiltration was confirmed.
Mechanism
The CLI installs or copies first-party agent integrations and, when enabled, locates and converts agent transcript files to local trajectory data.
AI rationale
This is a user-invoked agent configuration capability with local transcript handling, so it warrants a warning under the agent-control policy. The inspected metadata contains no lifecycle script, and no concrete malicious behavior was established.
Evidence
dist/cli.js
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes a command-line executable and has no npm lifecycle scripts.
- The explicit setup command configures coding-agent integrations, including an interactive mode and a force re-sync option.
- A guarded trajectory command reads agent transcripts only when its dedicated environment flag is enabled and writes converted data locally.
Evidence against
- No install-time lifecycle hook was found.
- No automatic network transfer of collected transcripts was established from the inspected entrypoint.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/cli.jsView file
553contains invisible/control Unicode U+200E (left-to-right mark)
`),i;function a(e){return r.stack.push(e),t;function t(){r.stack.pop()}}}function oB(e){throw Error("Cannot handle value `"+e+"`, expected node")}function sB(e){throw Error("Cannot handle unknown node `"+e.type+"`")}function cB(e,t){if(e.ty
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/cli.jsView on unpkg · L553342Trigger-reachable chain: manifest.bin -> bin/straion.mjs -> dist/cli.js
L342:
L343: `)}t.write(`payload.value = newResult;`),t.write(`return payload;`);let s=t.compile();return(t,n)=>s(e,t,n)},a,o=Fl,s=!bl.jitless,c=s&&Il.value,l=t.catchall,u;e._zod.parse=(d,f)=>{...
L344:
L345: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let n of e.seen.entries()){let r=n[1];if(t===n[0]){a(n);continue}if(e.external){let r=e.exter...
L346: ███████╗████████╗██████╗ █████╗ ██╗ ██████╗ ███╗ ██╗
...
L350: ███████║ ██║ ██║ ██║██║ ██║██║╚██████╔╝██║ ╚████║
L351: ╚══════╝ ╚═╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═════╝ ╚═╝ ╚═══╝`));function Jg(e,t=globalThis.Deno?globalThis.Deno.args:R.argv){let n=e.startsWith(`-`)?``:e.length===1?`-`:`--`,r=t.indexOf...
L352: causes hav
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/cli.jsView on unpkg · L342Findings
3 Critical6 High3 Medium4 Low
CriticalTrojan Source Unicodedist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighObfuscated Payload Loaderdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
Affected versions and remediation
This report applies to @straion/cli@0.1.0.
See all versions of @straion/cli for other recorded verdicts.
- Review the evidence and your use of @straion/cli@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.