@taskless/cli-nightly@0.11.4-20260929223045x656d04b
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe agent configuration write is a real capability and merits a warning under the agent-integration policy. The inspected manifest provides no evidence of automatic install-time activation or a concrete malicious payload.
Static reason
One or more suspicious static signals were detected.
Trigger
A user or automation explicitly runs the Taskless setup or init command in a project.
Impact
This changes the project-local agent capability surface, but no confirmed attack surface beyond that explicit configuration action was established.
Mechanism
The command selects agent targets and writes SKILL.md files beneath the selected integration directory.
AI rationale
The agent configuration write is a real capability and merits a warning under the agent-integration policy. The inspected manifest provides no evidence of automatic install-time activation or a concrete malicious payload.
Evidence
dist/index.js.agents
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The manifest scripts shown contain build and generation commands, with no npm install lifecycle hook.
- The bundle detects a Codex project configuration and maps that integration to the .agents directory.
- The installer writes SKILL.md files under selected agent directories when its init or setup flow runs.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as P, mkdir as V, writeFile as M, rm as he, readdir as oe, stat as Se, mkdtemp as ml, copyFile as cd, glob as ud, access as fd, readlink as dd, rename as Ht, cp a...
import { createReadStream as md, globSync as yd, existsSync as ms, readFileSync as bl, mkdtempSync as wd, writeFileSync as bd, rmSync as vd } from "node:fs";
import Sd, { createInterface as Ls } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Tp(), this._events = new Mp(), this._isInitialized = !1, xp(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new Rt(`Your pro
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import _, { stdin as od, stdout as pl } from "node:process";
L3: import * as li from "node:tty";
...
L10: import { AsyncLocalStorage as kd } from "node:async_hooks";
L11: import { execFile as Yt, spawn as ht } from "node:child_process";
L12: import { RULES_DIRECTORY as G, TASKLESS_DIRECTORY as $d, ENGINES as qe, ENGINE_LAYOUTS as Ze, isKnownEngine as gr, RULE_TESTS_DIRECTORY as ge } from "./layout.js";
...
L458: platform: Ph = ""
L459: } = typeof process > "u" ? {} : process, jh = "NO_COLOR" in Qe || Il.includes("--no-color"), Dh = "FORCE_COLOR" in Qe || Il.includes("--color"), Mh = Ph === "win32", Al = Qe.TERM =...
L460: function Cl(e, t, n, s, i = t.slice(0, Math.max(0, e)) + s, r = t.slice(Math.max(0, e + n.length)), o = r.indexOf(n)) {
...
L629: }
L630: for
Findings
2 High4 Medium6 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencedist/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.11.4-20260929223045x656d04b.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.11.4-20260929223045x656d04b before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.