registry / @taskless/cli-nightly / 0.13.0-20261016013447x784899c
@taskless/cli-nightly@0.13.0-20261016013447x784899c
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe static hints do not match executable attack behavior: the eval example is demonstration text, and authentication uses the configured Taskless device-code flow. The manifest has no install lifecycle hook, and the agent setup path is an explicit CLI command.
Static reason
One or more suspicious static signals were detected.
Trigger
No malicious install-time or import-time trigger was identified; project setup runs when the user invokes init.
Impact
No concrete unauthorized credential disclosure, hidden payload execution, or automatic agent configuration change was established.
Mechanism
The inspected authentication flow uses a configurable Taskless API base for device-code login, and the agent integration excerpt maps project skill directories.
AI rationale
The static hints do not match executable attack behavior: the eval example is demonstration text, and authentication uses the configured Taskless device-code flow. The manifest has no install lifecycle hook, and the agent setup path is an explicit CLI command.
Network endpoints1
app.taskless.io/cli
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- The manifest’s scripts are build, generation, testing, and typechecking tasks; its runtime entrypoint is dist/index.js, with no install lifecycle hook.
- Authentication uses the configured Taskless API base for device authorization and token polling, and stores the returned token under the repository’s .taskless directory.
- The flagged eval(payload) text appears inside a bundled demonstration rule that teaches how to detect eval calls; it is not an executed payload loader.
- The agent integration excerpt maps supported project skill directories; setup is performed through the CLI’s explicit init command.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as P, mkdir as G, writeFile as B, rm as re, readdir as Q, stat as ke, mkdtemp as Ao, copyFile as eu, glob as tu, access as qp, readlink as Wp, rename as it, cp as...
import { createReadStream as Yp, globSync as Oo, readdirSync as Xp, existsSync as Vn, readFileSync as nu, rmSync as su, mkdtempSync as Qp, writeFileSync as Zp } from "node:fs";
import eg, { createInterface as Qn } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new ky(), this._events = new Ny(), this._isInitialized = !1, Ty(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import T, { stdin as Mp, stdout as Qc } from "node:process";
L3: import * as Gi from "node:tty";
...
L10: import { AsyncLocalStorage as tg } from "node:async_hooks";
L11: import { execFile as Sn, spawn as ct } from "node:child_process";
L12: import { RULES_DIRECTORY as Z, TASKLESS_DIRECTORY as ng, ENGINES as De, ENGINE_LAYOUTS as vt, RULE_TESTS_DIRECTORY as we, isKnownEngine as qt } from "./layout.js";
...
L458: platform: Sm = ""
L459: } = typeof process > "u" ? {} : process, $m = "NO_COLOR" in yt || cu.includes("--no-color"), Em = "FORCE_COLOR" in yt || cu.includes("--color"), _m = Sm === "win32", uu = yt.TERM =...
L460: function fu(e, t, n, s, i = t.slice(0, Math.max(0, e)) + s, r = t.slice(Math.max(0, e + n.length)), o = r.indexOf(n)) {
...
L629: }
L630: for
Findings
2 High2 Medium8 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.0-20261016013447x784899c.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.0-20261016013447x784899c before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.