registry / @straion/cli / 0.1.2

@straion/cli@0.1.2

> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The package declares a CLI without npm lifecycle hooks, and the relevant agent setup is user-invoked. The reviewed source excerpts do not substantiate exfiltration, remote execution, or the scanner's Trojan-source claim.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user invokes `straion setup`, optionally selecting agents or choosing them through the interactive flow.

Impact

Setup can add or update Straion's agent integration in user configuration. No malicious impact was established from the inspected behavior.

Mechanism

The CLI selects agent configuration locations and runs the setup flow; the inspected audit helper's generic request wrapper does not show command output flowing to an unrelated recipient.

AI rationale

Evidence

dist/run-D9tgSqmK.js

Decision evidence

public snapshot

AI called this Clean at 76.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

The manifest exposes a CLI binary and contains no npm lifecycle hook declarations.
Agent integration paths are selected from user configuration directories, including Claude, Cursor, and OpenCode locations.
The setup command runs only when the user invokes `straion setup`; it accepts explicit agent selection or launches interactive setup.
The inspected audit helper performs requests through a generic fetch wrapper, with no evidence here that command output is sent to an unrelated recipient.
The setup bundle excerpt contains ordinary bundle metadata and does not substantiate the scanner's Trojan-source claim.

Evidence against

The CLI can configure and install Straion integrations for supported coding agents when setup is invoked.
The audit helper imports child-process support; the inspected excerpt does not establish exfiltration or remote execution.

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetwork

Source & flagged code

7 flagged

dist/run-D9tgSqmK.jsView file

High

Child Process

Package source references child process execution.

dist/run-D9tgSqmK.jsView on unpkg · L1

1!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)... L2: `)}})),z=m((e=>{Object.defineProperty(e,"__esModule",{value:!0}),e.GraphQLError=void 0,e.formatError=s,e.printError=o;var t=nt(),n=rt(),r=it();function i(e){let t=e[0];return t==nu... ... L9: `,size:2};case 114:return{value:`\r`,size:2};case 116:return{value:` `,size:2}}throw(0,t.syntaxError)(e.source,n,`Invalid character escape sequence: "${r.slice(n,n+2)}".`)}function... L10: `));return e.line+=h.length-1,e.lineStart=l,t}if(o===92&&i.charCodeAt(u+1)===34&&i.charCodeAt(u+2)===34&&i.charCodeAt(u+3)===34){m+=i.slice(p,u),p=u+1,u+=4;continue}if(o===10||o===... L11: ... L15: L16: https://yarnpkg.com/en

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/run-D9tgSqmK.jsView on unpkg · L1

Findings

2 Critical5 High3 Medium4 Low

CriticalTrojan Source Unicodedist/run-agent-setup-FgNfoa0m.js

CriticalPrevious Version Dangerous Deltadist/commands-nQz0a7rx.js

HighChild Processdist/run-D9tgSqmK.js

HighSame File Env Network Executiondist/run-D9tgSqmK.js

HighCommand Output Exfiltrationdist/audit-mode-B1PGbD1u.js

HighCross File Remote Execution Contextdist/audit-mode-B1PGbD1u.js

HighTrigger Reachable Command Output Exfiltrationdist/audit-mode-B1PGbD1u.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEval

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @straion/cli@0.1.2.

See all versions of @straion/cli for other recorded verdicts.

Review the evidence and your use of @straion/cli@0.1.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-07 23:06:59.146Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @straion/cli / 0.1.2

@straion/cli@0.1.2

> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

A user invokes `straion setup`, optionally selecting agents or choosing them through the interactive flow.

Impact

Setup can add or update Straion's agent integration in user configuration. No malicious impact was established from the inspected behavior.

Mechanism

The CLI selects agent configuration locations and runs the setup flow; the inspected audit helper's generic request wrapper does not show command output flowing to an unrelated recipient.

AI rationale

Evidence

dist/run-D9tgSqmK.js

Decision evidence

public snapshot

AI called this Clean at 76.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

The manifest exposes a CLI binary and contains no npm lifecycle hook declarations.
Agent integration paths are selected from user configuration directories, including Claude, Cursor, and OpenCode locations.
The setup command runs only when the user invokes `straion setup`; it accepts explicit agent selection or launches interactive setup.
The inspected audit helper performs requests through a generic fetch wrapper, with no evidence here that command output is sent to an unrelated recipient.
The setup bundle excerpt contains ordinary bundle metadata and does not substantiate the scanner's Trojan-source claim.

Evidence against

The CLI can configure and install Straion integrations for supported coding agents when setup is invoked.
The audit helper imports child-process support; the inspected excerpt does not establish exfiltration or remote execution.

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetwork

Source & flagged code

7 flagged

dist/run-D9tgSqmK.jsView file

High

Child Process

Package source references child process execution.

dist/run-D9tgSqmK.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/run-D9tgSqmK.jsView on unpkg · L1

Findings

2 Critical5 High3 Medium4 Low

CriticalTrojan Source Unicodedist/run-agent-setup-FgNfoa0m.js

CriticalPrevious Version Dangerous Deltadist/commands-nQz0a7rx.js

HighChild Processdist/run-D9tgSqmK.js

HighSame File Env Network Executiondist/run-D9tgSqmK.js

HighCommand Output Exfiltrationdist/audit-mode-B1PGbD1u.js

HighCross File Remote Execution Contextdist/audit-mode-B1PGbD1u.js

HighTrigger Reachable Command Output Exfiltrationdist/audit-mode-B1PGbD1u.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEval

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @straion/cli@0.1.2.

See all versions of @straion/cli for other recorded verdicts.

Review the evidence and your use of @straion/cli@0.1.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-07 23:06:59.146Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.