registry / @taskless/cli-nightly / 0.13.0-20261016095010x7fe4d17
@taskless/cli-nightly@0.13.0-20261016095010x7fe4d17
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or credential redirect to an unofficial gateway. The flagged `eval` is example text, and agent skill setup is an explicit CLI operation.
Static reason
One or more suspicious static signals were detected.
Trigger
Agent skill setup is triggered by running `taskless init`; login is triggered by the user invoking authentication.
Impact
No malicious effect was identified.
Mechanism
The CLI installs Taskless skills into detected project agent directories and uses a device authorization flow for login.
AI rationale
Source inspection found no install lifecycle hook or credential redirect to an unofficial gateway. The flagged `eval` is example text, and agent skill setup is an explicit CLI operation.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists build, generation, and test scripts; no npm install lifecycle hook was found.
- Login uses device authorization through the configured Taskless API base and polls for authorization; the source does not show a fixed unofficial credential gateway.
- Agent skills are installed by the explicit `taskless init` command into detected project directories.
- The `eval` match is an embedded example in a rule demonstrating detection of unsafe code, not executable package logic.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as x, mkdir as z, writeFile as B, rm as oe, readdir as Q, stat as $e, mkdtemp as No, copyFile as ou, glob as au, access as Qp, readlink as Zp, rename as rt, cp as...
import { createReadStream as rg, globSync as Lo, readdirSync as og, existsSync as qn, readFileSync as lu, rmSync as cu, mkdtempSync as ag, writeFileSync as lg } from "node:fs";
import cg, { createInterface as Zn } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Oy(), this._events = new My(), this._isInitialized = !1, Cy(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import T, { stdin as Hp, stdout as iu } from "node:process";
L3: import * as Xi from "node:tty";
...
L10: import { AsyncLocalStorage as ug } from "node:async_hooks";
L11: import { execFile as $n, spawn as ut } from "node:child_process";
L12: import { RULES_DIRECTORY as Z, TASKLESS_DIRECTORY as fg, ENGINES as Me, ENGINE_LAYOUTS as kt, RULE_TESTS_DIRECTORY as ve, isKnownEngine as qt } from "./layout.js";
...
L458: platform: Rm = ""
L459: } = typeof process > "u" ? {} : process, Nm = "NO_COLOR" in wt || gu.includes("--no-color"), Fm = "FORCE_COLOR" in wt || gu.includes("--color"), Lm = Rm === "win32", mu = wt.TERM =...
L460: function yu(e, t, n, s, i = t.slice(0, Math.max(0, e)) + s, r = t.slice(Math.max(0, e + n.length)), o = r.indexOf(n)) {
...
L629: }
L630: for
Findings
2 High3 Medium7 Low
HighCredential Redirect Persistencedist/index.js
HighObfuscated Payload Loaderdist/index.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumStripped Provenance Metadatadist/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.0-20261016095010x7fe4d17.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.0-20261016095010x7fe4d17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.