registry / @taskless/cli-nightly / 0.13.0-20261015175549xf240f6f
@taskless/cli-nightly@0.13.0-20261015175549xf240f6f
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection found no registry install hook or concrete attack behavior. The suspicious loader and credential-redirection signals resolve to a demo rule and a configurable Taskless API device-auth flow.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when invoked; agent setup is available through the explicit init command.
Impact
No unrelated credential transfer, hidden code execution, or unconsented install-time change was identified.
Mechanism
No confirmed attack surface was established: setup detects local agent directories and writes selected Taskless skill metadata, while the eval example is inert text.
AI rationale
Source inspection found no registry install hook or concrete attack behavior. The suspicious loader and credential-redirection signals resolve to a demo rule and a configurable Taskless API device-auth flow.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI bundle and lists build scripts, with no registry install lifecycle hook.
- The indicated .claude path is used for local agent detection; the user-invoked init command offers tool selection and writes Taskless skill metadata to selected locations.
- Authentication defaults to the Taskless service; changing the API destination requires an environment or configuration setting, and login uses a device-code flow.
- The eval example is embedded in a demo rule that teaches detection; it is not an executed payload.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as P, mkdir as K, writeFile as M, rm as ie, readdir as J, stat as ye, mkdtemp as so, copyFile as Sc, glob as $c, access as ip, readlink as rp, rename as Ze, cp as...
import { createReadStream as fp, existsSync as Fn, globSync as Ec, readFileSync as _c, rmSync as Ic, mkdtempSync as dp, writeFileSync as hp } from "node:fs";
import pp, { createInterface as Bn } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Nm(), this._events = new Vm(), this._isInitialized = !1, Dm(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new Jt(`Your pro
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import k, { stdin as ep, stdout as bc } from "node:process";
L3: import * as Pi from "node:tty";
...
L10: import { AsyncLocalStorage as gp } from "node:async_hooks";
L11: import { execFile as hn, spawn as it } from "node:child_process";
L12: import { RULES_DIRECTORY as Y, TASKLESS_DIRECTORY as mp, ENGINES as Ne, ENGINE_LAYOUTS as wt, RULE_TESTS_DIRECTORY as pe, isKnownEngine as jt } from "./layout.js";
...
L458: platform: xg = ""
L459: } = typeof process > "u" ? {} : process, Lg = "NO_COLOR" in pt || xc.includes("--no-color"), Pg = "FORCE_COLOR" in pt || xc.includes("--color"), jg = xg === "win32", Lc = pt.TERM =...
L460: function Pc(e, t, n, s, i = t.slice(0, Math.max(0, e)) + s, r = t.slice(Math.max(0, e + n.length)), o = r.indexOf(n)) {
...
L629: }
L630: for
Findings
2 High2 Medium8 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.0-20261015175549xf240f6f.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.0-20261015175549xf240f6f before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.