registry / @taskless/cli-nightly / 0.13.0-20261016012002x0307141
@taskless/cli-nightly@0.13.0-20261016012002x0307141
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe reported eval signal is an example embedded in a demonstration rule, and agent skill installation is part of a user-invoked setup flow with a confirmation check. The inspected manifest has no install hook, and the reviewed authentication code uses device authorization; no concrete attack behavior was established.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the Taskless setup command and confirms the proposed changes.
Impact
This provides the package’s agent integration; no harmful effect was established.
Mechanism
The CLI detects project-local agent directories and writes Taskless skills for those targets.
AI rationale
The reported eval signal is an example embedded in a demonstration rule, and agent skill installation is part of a user-invoked setup flow with a confirmation check. The inspected manifest has no install hook, and the reviewed authentication code uses device authorization; no concrete attack behavior was established.
Evidence
package.jsondist/index.js
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI bundle and lists build and generation scripts; it has no install lifecycle hook.
- The flagged eval call is inside an embedded demonstration rule example.
- Agent directories are detected for integration, and the init flow checks for confirmation before writing the skills.
- Login uses a device authorization token-polling flow.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as P, mkdir as G, writeFile as B, rm as re, readdir as Q, stat as ke, mkdtemp as Ao, copyFile as eu, glob as tu, access as qp, readlink as Wp, rename as it, cp as...
import { createReadStream as Yp, globSync as Oo, readdirSync as Xp, existsSync as Vn, readFileSync as nu, rmSync as su, mkdtempSync as Qp, writeFileSync as Zp } from "node:fs";
import eg, { createInterface as Qn } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new ky(), this._events = new Ny(), this._isInitialized = !1, Ty(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import T, { stdin as Mp, stdout as Qc } from "node:process";
L3: import * as Gi from "node:tty";
...
L10: import { AsyncLocalStorage as tg } from "node:async_hooks";
L11: import { execFile as Sn, spawn as ct } from "node:child_process";
L12: import { RULES_DIRECTORY as Z, TASKLESS_DIRECTORY as ng, ENGINES as De, ENGINE_LAYOUTS as vt, RULE_TESTS_DIRECTORY as we, isKnownEngine as qt } from "./layout.js";
...
L458: platform: Sm = ""
L459: } = typeof process > "u" ? {} : process, $m = "NO_COLOR" in yt || cu.includes("--no-color"), Em = "FORCE_COLOR" in yt || cu.includes("--color"), _m = Sm === "win32", uu = yt.TERM =...
L460: function fu(e, t, n, s, i = t.slice(0, Math.max(0, e)) + s, r = t.slice(Math.max(0, e + n.length)), o = r.indexOf(n)) {
...
L629: }
L630: for
Findings
2 High2 Medium8 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.0-20261016012002x0307141.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.0-20261016012002x0307141 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.