@taskless/cli-nightly@0.12.0-20261006075423xca69f92
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource establishes explicit user-command agent configuration mutation, which warrants a capability warning under the supplied policy. The scanner's malicious labels were not substantiated by the inspected source, and no install-time hijack or hidden credential export was established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running taskless init, or selecting agent tools in interactive CLI setup.
Impact
Agent sessions can receive changed Taskless instructions after reloading. Later init invocations can update installed integrations without another prompt; no background update mechanism was established.
Mechanism
The installer selects agent destinations, writes skill and command stubs, removes previously recorded obsolete integrations, and saves installation state.
AI rationale
Source establishes explicit user-command agent configuration mutation, which warrants a capability warning under the supplied policy. The scanner's malicious labels were not substantiated by the inspected source, and no install-time hijack or hidden credential export was established.
Evidence
dist/index.js.taskless.claude.agents.cursor.opencodeSKILL.md
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes dist/index.js as the CLI and module entrypoint; it has no npm install lifecycle hooks.
- The bundle detects agent directories, including .cursor, and selects them as installation destinations.
- The skill installer writes SKILL.md stubs into selected agent directories.
- The explicit init command invokes the installer without an additional interactive prompt.
- The installer updates skills and commands and saves installation state; subsequent init invocations can rewrite these integrations.
Evidence against
- The interactive setup wizard asks which tools to enable.
- Inspected authentication defaults to https://app.taskless.io/cli; no fixed unofficial credential gateway was established.
- The inspected eval matches are rule examples, not executable payload loading.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
4 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.12.0-20261002181147x023048f
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.12.0-20261002181147x023048f
similarity = 0.643
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as D, mkdir as W, writeFile as V, rm as ie, readdir as Q, stat as ge, mkdtemp as Xl, copyFile as Zl, glob as ec, access as Th, readlink as Ch, rename as Ye, cp as...
import { createReadStream as Ph, existsSync as An, globSync as nc, readFileSync as sc, rmSync as ic, mkdtempSync as jh, writeFileSync as Dh } from "node:fs";
import Mh, { createInterface as Qs } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new om(), this._events = new mm(), this._isInitialized = !1, fm(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new Kt(`Your pro
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsFindings
1 Critical2 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.12.0-20261006075423xca69f92.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.12.0-20261006075423xca69f92 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.