registry / @straion/cli / 0.1.20
@straion/cli@0.1.20
> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe manifest and entrypoint describe a CLI without an install lifecycle hook. The flagged execution and data-handling signals resolve to subcommand execution, gated local trajectory collection, user-invoked integration setup, and git notes sent to the selected push remote; no attack was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; setup and trajectory collection require user action or an explicit environment flag.
Impact
No confirmed attack impact was established.
Mechanism
Inspected process execution supports CLI subcommands and git operations; no confirmed command-output transfer to an unrelated recipient was found.
AI rationale
The manifest and entrypoint describe a CLI without an install lifecycle hook. The flagged execution and data-handling signals resolve to subcommand execution, gated local trajectory collection, user-invoked integration setup, and git notes sent to the selected push remote; no attack was established.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI binary; inspection found no lifecycle-script entry.
- The flagged spawn path starts a subcommand with inherited standard input, output, and error streams.
- Trajectory collection requires STRAION_TRAJECTORIES_ENABLED=1 and writes a local JSON file.
- The audit hook passes the pushed remote to an explicit git-note push.
- Setup is an invoked CLI command that presents agent integrations for selection and setup.
- The agent setup runner updates Straion integrations through its setup flow.
Evidence against
- The entrypoint imports the CLI bundle; no install-time execution path was found.
- Command-output handling resolves to CLI and git operations; no hidden exfiltration path was established.
- Setup and trajectory collection are user-invoked or gated, and no confirmed attack surface remains.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
7 flaggeddist/audit-Esx3Pe_q.jsView file
1!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)...
L2: `)}const lt=`▌ `;function P(e,t){return`${`${e}:`.padEnd(16)}${t}`}function ut(e){return e===``?``:` ${e}`}function dt(e){let t=[],{session:n}=e;if(t.push(`# Audit report — ${F(n....
High
Child Process
Package source references child process execution.
dist/audit-Esx3Pe_q.jsView on unpkg · L1dist/automode-DT4EcMrM.jsView file
12Expecting one of '${n.join(`', '`)}'`);return this._lifeCycleHooks[e]?this._lifeCycleHooks[e].push(t):this._lifeCycleHooks[e]=[t],this}exitOverride(e){return e?this._exitCallback=e...
L13: - already used by option '${t.flags}'`)}this._initOptionGroup(e),this.options.push(e)}_registerCommand(e){let t=e=>[e.name()].concat(e.aliases()),n=t(e).find(e=>this._findCommand(...
L14: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu...
...
L18: `),this.outputHelp({error:!0}));let n=t||{},r=n.exitCode||1,i=n.code||`commander.error`;this._exit(r,i,e)}_parseOptionsEnv(){this.options.forEach(e=>{if(e.envVar&&e.envVar in l.env...
L19: Expecting one of '${n.join(`', '`)}
Findings
1 Critical6 High2 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/commands-C9gfLSdo.js
HighChild Processdist/audit-Esx3Pe_q.js
HighSame File Env Network Executiondist/automode-DT4EcMrM.js
HighCommand Output Exfiltrationdist/automode-DT4EcMrM.js
HighCross File Remote Execution Contextdist/automode-DT4EcMrM.js
HighTrigger Reachable Command Output Exfiltrationdist/automode-DT4EcMrM.js
HighSemantic Analysis Limiteddist/audit-Esx3Pe_q.js#virtual:string-array:round1
MediumNetwork
MediumEnvironment Vars
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @straion/cli@0.1.20.
See all versions of @straion/cli for other recorded verdicts.
- Review the evidence and your use of @straion/cli@0.1.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.