registry / @straion/cli / 0.1.11
@straion/cli@0.1.11
> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).
AI Security Review
scanned 21d ago · by lpm-firewall-aiSource inspection found a conditional silent refresh of existing Straion agent integrations, which warrants a warning under the agent extension lifecycle policy. The source does not establish a concrete malicious attack chain.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the default CLI command when an existing Straion integration is detected and its saved version differs.
Impact
Agent integration behavior can change without a separate prompt at update time; foreign-agent settings mutation or credential disclosure was not established.
Mechanism
The updater replaces its integration directory with bundled files and runs a silent upgrade for configured integrations.
AI rationale
Source inspection found a conditional silent refresh of existing Straion agent integrations, which warrants a warning under the agent extension lifecycle policy. The source does not establish a concrete malicious attack chain.
Evidence
dist/default-BOJof-Oc.jsdist/run-agent-setup-DDeXOxrk.jsdist/run-FG7qsjn9.jsdist/commands-glxMHi6n.js
Decision evidence
public snapshotAI called this Suspicious at 80.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes the CLI through its bin entry.
- The default command conditionally invokes the agent integration handler.
- The updater can recursively replace its integration directory with bundled files.
- When integrations are already configured and their saved version is stale, the code runs a silent upgrade.
- The agent integration code identifies Claude and Cursor integration locations.
- The separate setup command supports explicit agent selection or interactive setup.
Evidence against
- The update is limited to Straion-owned bundled integrations; inspected source does not establish foreign-agent settings mutation or credential disclosure.
- The separate setup command is an explicit user action.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
6 flaggeddist/automode-D0D-dA9q.jsView file
1!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)...
L2: `)}displayWidth(e){return u(e).length}styleTitle(e){return e}styleUsage(e){return e.split(` `).map(e=>e===`[options]`?this.styleOptionText(e):e===`[command]`?this.styleSubcommandTe...
High
Child Process
Package source references child process execution.
dist/automode-D0D-dA9q.jsView on unpkg · L112Expecting one of '${n.join(`', '`)}'`);return this._lifeCycleHooks[e]?this._lifeCycleHooks[e].push(t):this._lifeCycleHooks[e]=[t],this}exitOverride(e){return e?this._exitCallback=e...
L13: - already used by option '${t.flags}'`)}this._initOptionGroup(e),this.options.push(e)}_registerCommand(e){let t=e=>[e.name()].concat(e.aliases()),n=t(e).find(e=>this._findCommand(...
L14: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu...
...
L18: `),this.outputHelp({error:!0}));let n=t||{},r=n.exitCode||1,i=n.code||`commander.error`;this._exit(r,i,e)}_parseOptionsEnv(){this.options.forEach(e=>{if(e.envVar&&e.envVar in l.env...
L19: Expecting one of '${n.join(`', '`)}
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/automode-D0D-dA9q.jsView on unpkg · L12Findings
1 Critical5 High3 Medium4 Low
CriticalTrojan Source Unicodedist/run-agent-setup-DDeXOxrk.js
HighChild Processdist/automode-D0D-dA9q.js
HighSame File Env Network Executiondist/automode-D0D-dA9q.js
HighCommand Output Exfiltrationdist/automode-D0D-dA9q.js
HighCross File Remote Execution Contextdist/automode-D0D-dA9q.js
HighTrigger Reachable Command Output Exfiltrationdist/automode-D0D-dA9q.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @straion/cli@0.1.11.
See all versions of @straion/cli for other recorded verdicts.
- Review the evidence and your use of @straion/cli@0.1.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.