@taskless/cli-nightly@0.11.2-20260909051148x9818bc6
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo install-time execution, credential redirection, obfuscated payload loader, or self-dependency was found. The explicit agent-control-surface mutation warrants a warning under policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs taskless init, or invokes the CLI with telemetry enabled.
Impact
Agent behavior can be extended in the selected project; telemetry exposes an identifier and repository-owner metadata.
Mechanism
Agent-extension file mutation and telemetry reporting.
AI rationale
No install-time execution, credential redirection, obfuscated payload loader, or self-dependency was found. The explicit agent-control-surface mutation warrants a warning under policy.
Evidence
dist/index.js.taskless/skills/taskless/SKILL.md.taskless/commands/tskl/tskl.md.claude/skills/taskless/SKILL.md.cursor/skills/taskless/SKILL.md.agents/skills/taskless/SKILL.md.opencode/skills/taskless/SKILL.md
Network endpoints2
z.taskless.ioapp.taskless.io/cli
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The init flow detects Claude, Cursor, OpenCode, and Codex project markers.
- Its setup routine removes and writes Taskless skill and command files in selected agent directories.
- Every CLI run enables telemetry by default and identifies a persistent ID with repository-owner metadata to z.taskless.io.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Agent-file changes occur through the user-invoked init flow; no hidden loader or eval execution was found.
- Authentication posts device-flow data to app.taskless.io and stores its returned token locally; no credential redirect was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.11.2-20260911010750xea9cef8
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.11.2-20260911010750xea9cef8
similarity = 0.857
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { mkdir as B, readFile as D, writeFile as P, rm as re, readdir as ae, stat as we, mkdtemp as Ta, copyFile as Ku, glob as Gu, access as zu, readlink as Ju, rename as Ca, cp a...
import { createReadStream as Xu, existsSync as hi, readFileSync as Ra, globSync as Zu, mkdtempSync as ef, writeFileSync as tf, rmSync as nf } from "node:fs";
import sf, { createInterface as Vi } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new oh(), this._events = new mh(), this._isInitialized = !1, fh(e, "You must pass your PostHog project's ...
throw this.beginBackoff(), new mt(`Your pro
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsFindings
1 Critical3 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
HighSemantic Analysis Limitedassets/reference.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.11.2-20260909051148x9818bc6.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.11.2-20260909051148x9818bc6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.