registry / @taskless/cli-nightly / 0.11.2-20260908165853x12e5f92
@taskless/cli-nightly@0.11.2-20260908165853x12e5f92
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has no registry lifecycle hook, so the extension writes are user-invoked rather than install-time. Its project-local AI-agent integration remains a capability that warrants a warning under the stated policy.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs taskless init or taskless update in a project.
Impact
Changes instructions available to supported AI coding tools in that project.
Mechanism
Project-local AI-agent skill and command installation.
AI rationale
The package has no registry lifecycle hook, so the extension writes are user-invoked rather than install-time. Its project-local AI-agent integration remains a capability that warrants a warning under the stated policy.
Evidence
dist/index.js.taskless/skills/taskless/SKILL.md.claude/skills/taskless/SKILL.md.agents/skills/taskless/SKILL.md.cursor/skills/taskless/SKILL.md.opencode/skills/taskless/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes dist/index.js as the CLI entry point and contains no install lifecycle hook.
- The explicit taskless init command installs or updates Taskless skills.
- Init detects several AI coding-tool directories and targets their project-local skill locations.
- The installer can replace managed skill stubs in detected tool directories.
Evidence against
- No preinstall, install, or postinstall hook is declared.
- The AI-agent writes require an explicit CLI init action and are project-local.
- No hidden payload loader, credential exfiltration, or unconsented install-time execution was confirmed.
- The dynamic runtime-rule import is guarded by authentication/server verification or an explicitly dangerous flag.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
Source & flagged code
5 flaggeddist/recipes-DnBwJ7EO.jsView file
173"severity": "error",
L174: "message": "Avoid eval()",
L175: "note": null,
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/recipes-DnBwJ7EO.jsView on unpkg · L173dist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { mkdir as B, readFile as D, writeFile as P, rm as re, readdir as ae, stat as we, mkdtemp as Ta, copyFile as Wu, glob as Ku, access as Gu, readlink as zu, rename as Ca, cp a...
import { createReadStream as Qu, existsSync as hi, readFileSync as Ra, globSync as Xu, mkdtempSync as Zu, writeFileSync as ef, rmSync as tf } from "node:fs";
import nf, { createInterface as Vi } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new rh(), this._events = new gh(), this._isInitialized = !1, uh(e, "You must pass your PostHog project's ...
throw this.beginBackoff(), new mt(`Your pro
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
Findings
3 High4 Medium6 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
HighSemantic Analysis Limitedassets/reference.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/recipes-DnBwJ7EO.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.11.2-20260908165853x12e5f92.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.11.2-20260908165853x12e5f92 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.