registry / @taskless/cli-nightly / 0.13.3-20261021060539xd5112cb
@taskless/cli-nightly@0.13.3-20261021060539xd5112cb
⚠ Under reviewNightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe flagged CLI credential flow uses the Taskless service by default, with the API URL supplied by operator configuration, and no concrete credential attack was established. The optional ast-grep executable is invoked but its source was unavailable, leaving a selected runtime dependency unresolved; manual review is warranted.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes a CLI feature that runs an ast-grep scan.
Impact
The behavior and effects of that optional executable remain unresolved, so a clean determination is not supported.
Mechanism
The CLI launches the ast-grep executable with scan arguments; the dependency implementation could not be inspected.
AI rationale
The flagged CLI credential flow uses the Taskless service by default, with the API URL supplied by operator configuration, and no concrete credential attack was established. The optional ast-grep executable is invoked but its source was unavailable, leaving a selected runtime dependency unresolved; manual review is warranted.
Evidence
package.jsondist/index.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The CLI uses the Taskless service by default and permits an operator-supplied API URL.
- The CLI exposes an explicit Taskless login command; inspected code sends its bearer token through the configured API client.
- The manifest includes optional platform-specific ast-grep CLI dependencies, and the CLI invokes an ast-grep scan subprocess.
- The prepared tsx dependency manifest and loader identify a TypeScript runtime package and its loader entrypoint.
- The ast-grep CLI dependency source was unavailable in the inspected snapshot, so its behavior could not be verified.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.0-20261016182619x41fd794
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.0-20261016182619x41fd794
similarity = 0.857
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as zg } from "node:async_hooks";
L11: import { execFile as Kt, spawn as dt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as Kg, ENGINES as Ve, ENGINE_LAYOUTS as Et, RULE_TESTS_DIRECTORY as me, isKnownEngine as Ht } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as C, mkdir as K, writeFile as D, rm as ne, readdir as H, stat as ye, mkdtemp as ea, copyFile as Ru, glob as Lu, access as Ng, readlink as Fg, chmod as Cg, rename...
import { createReadStream as Bg, globSync as na, readdirSync as Vg, existsSync as Xn, readFileSync as xu, rmSync as Nu, mkdtempSync as qg, writeFileSync as Wg } from "node:fs";
import Gg, { createInterface as as } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new f0(), this._events = new k0(), this._isInitialized = !1, m0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.3-20261021060539xd5112cb.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.3-20261021060539xd5112cb before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.