@taskless/cli-nightly@0.12.0-20260929234608x944fe92
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no npm lifecycle hook, but its user-invoked setup can modify AI-agent configuration directories. Under the agent integration policy, that concrete capability warrants a non-blocking warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the Taskless setup flow or the explicit taskless init command.
Impact
This can modify AI-agent project configuration after a user command, but no unconsented lifecycle mutation or data exfiltration was confirmed.
Mechanism
The bundle detects project agent directories and writes Taskless skill files to selected configuration targets; init can perform this as a non-interactive batch operation.
AI rationale
The package has no npm lifecycle hook, but its user-invoked setup can modify AI-agent configuration directories. Under the agent integration policy, that concrete capability warrants a non-blocking warning.
Evidence
dist/index.js.taskless.claude.opencode.cursor.agents
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest has no npm install lifecycle hook and exposes the executable through dist/index.js.
- The bundle detects Claude Code, OpenCode, Cursor, and Codex project locations.
- The interactive setup asks the user which tools to enable before configuration.
- The setup path writes Taskless skill files into selected agent locations.
- The explicit init command supports unattended batch installation.
Evidence against
- No credential harvesting, unrestricted credential forwarding, remote payload execution, or self-dependency was identified in the inspected paths.
- No install-time hook triggers the agent configuration behavior.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.11.4-20260929223045x656d04b
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.11.4-20260929223045x656d04b
similarity = 0.714
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as j, mkdir as q, writeFile as U, rm as te, readdir as H, stat as pe, mkdtemp as _l, copyFile as Il, glob as Ad, access as Td, readlink as Cd, rename as Ge, cp as...
import { createReadStream as Pd, globSync as jd, existsSync as Ss, readFileSync as Tl, rmSync as Cl, mkdtempSync as Dd, writeFileSync as Md } from "node:fs";
import Ud, { createInterface as Ms } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Jp(), this._events = new rg(), this._isInitialized = !1, eg(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new Pt(`Your pro
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsFindings
1 Critical2 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.12.0-20260929234608x944fe92.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.12.0-20260929234608x944fe92 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.