registry / @straion/cli / 0.1.7
@straion/cli@0.1.7
> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe package contains a guarded agent plugin setup capability, which warrants a warning under the agent integration policy. The inspected evidence does not establish malicious behavior or an automatic npm lifecycle trigger.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the relevant agent setup command and GitHub Copilot is detected.
Impact
This adds an agent plugin to the user’s Copilot environment.
Mechanism
The setup code runs the Copilot plugin install command using the configured plugin source.
AI rationale
The package contains a guarded agent plugin setup capability, which warrants a warning under the agent integration policy. The inspected evidence does not establish malicious behavior or an automatic npm lifecycle trigger.
Evidence
dist/run-B_CVTtnN.js
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI binary and declares no install lifecycle hook.
- The Copilot setup code installs a plugin from its configured plugin source when Copilot is detected.
- The setup bundle checks for installed agents and their setup status.
Evidence against
- The inspected setup behavior is part of the CLI’s agent integration functionality; no unconsented npm-time agent configuration mutation was established.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flaggeddist/automode-CNPzlx_T.jsView file
1!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)...
L2: `)}displayWidth(e){return u(e).length}styleTitle(e){return e}styleUsage(e){return e.split(` `).map(e=>e===`[options]`?this.styleOptionText(e):e===`[command]`?this.styleSubcommandTe...
High
Child Process
Package source references child process execution.
dist/automode-CNPzlx_T.jsView on unpkg · L112Expecting one of '${n.join(`', '`)}'`);return this._lifeCycleHooks[e]?this._lifeCycleHooks[e].push(t):this._lifeCycleHooks[e]=[t],this}exitOverride(e){return e?this._exitCallback=e...
L13: - already used by option '${t.flags}'`)}this._initOptionGroup(e),this.options.push(e)}_registerCommand(e){let t=e=>[e.name()].concat(e.aliases()),n=t(e).find(e=>this._findCommand(...
L14: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu...
...
L18: `),this.outputHelp({error:!0}));let n=t||{},r=n.exitCode||1,i=n.code||`commander.error`;this._exit(r,i,e)}_parseOptionsEnv(){this.options.forEach(e=>{if(e.envVar&&e.envVar in l.env...
L19: Expecting one of '${n.join(`', '`)}
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/automode-CNPzlx_T.jsView on unpkg · L12Findings
2 Critical5 High3 Medium4 Low
CriticalTrojan Source Unicodedist/run-agent-setup-BjCJEobB.js
CriticalPrevious Version Dangerous Deltadist/run-B_CVTtnN.js
HighChild Processdist/automode-CNPzlx_T.js
HighSame File Env Network Executiondist/automode-CNPzlx_T.js
HighCommand Output Exfiltrationdist/automode-CNPzlx_T.js
HighCross File Remote Execution Contextdist/automode-CNPzlx_T.js
HighTrigger Reachable Command Output Exfiltrationdist/automode-CNPzlx_T.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @straion/cli@0.1.7.
See all versions of @straion/cli for other recorded verdicts.
- Review the evidence and your use of @straion/cli@0.1.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.