registry / @taskless/cli-nightly / 0.13.0-20261016085136x826cf88
@taskless/cli-nightly@0.13.0-20261016085136x826cf88
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected flagged code supports normal CLI behavior rather than a concrete attack. The scanner's credential and payload findings are not substantiated by the inspected source.
Static reason
One or more suspicious static signals were detected.
Trigger
No install-time trigger is declared; agent skill setup is reached through a CLI routine.
Impact
The inspected behavior does not establish credential disclosure, hidden code execution, or unconsented agent configuration changes.
Mechanism
The inspected credential client uses the configured Taskless API URL, and the apparent eval payload is sample content embedded in the bundle.
AI rationale
The manifest has no install lifecycle hook, and the inspected flagged code supports normal CLI behavior rather than a concrete attack. The scanner's credential and payload findings are not substantiated by the inspected source.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall hook; its entrypoint is the CLI bundle.
- The CLI sends its bearer token through a client whose base URL comes from the Taskless API configuration, with the Taskless service URL as fallback.
- Agent skill files are written by an explicit setup routine that detects project agent directories; the flagged location is a detector entry.
- The apparent eval payload is embedded in a sample rule explaining why eval should be flagged, not executed by the CLI.
Evidence against
- The static credential redirect finding is not established by the inspected code: the API destination is configurable and defaults to the Taskless service endpoint.
- The payload-loader finding is not established: the inspected eval example is documentation content embedded in the bundle.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as x, mkdir as z, writeFile as B, rm as oe, readdir as Q, stat as $e, mkdtemp as No, copyFile as ou, glob as au, access as Qp, readlink as Zp, rename as rt, cp as...
import { createReadStream as rg, globSync as Lo, readdirSync as og, existsSync as qn, readFileSync as lu, rmSync as cu, mkdtempSync as ag, writeFileSync as lg } from "node:fs";
import cg, { createInterface as Zn } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Oy(), this._events = new My(), this._isInitialized = !1, Cy(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import T, { stdin as Hp, stdout as iu } from "node:process";
L3: import * as Xi from "node:tty";
...
L10: import { AsyncLocalStorage as ug } from "node:async_hooks";
L11: import { execFile as $n, spawn as ut } from "node:child_process";
L12: import { RULES_DIRECTORY as Z, TASKLESS_DIRECTORY as fg, ENGINES as Me, ENGINE_LAYOUTS as kt, RULE_TESTS_DIRECTORY as ve, isKnownEngine as qt } from "./layout.js";
...
L458: platform: Rm = ""
L459: } = typeof process > "u" ? {} : process, Nm = "NO_COLOR" in wt || gu.includes("--no-color"), Fm = "FORCE_COLOR" in wt || gu.includes("--color"), Lm = Rm === "win32", mu = wt.TERM =...
L460: function yu(e, t, n, s, i = t.slice(0, Math.max(0, e)) + s, r = t.slice(Math.max(0, e + n.length)), o = r.indexOf(n)) {
...
L629: }
L630: for
Findings
2 High2 Medium8 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.0-20261016085136x826cf88.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.0-20261016085136x826cf88 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.