@taskless/cli-nightly@0.13.3-20261021090255xd06b489
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThis warrants a warning because a custom API host receives the saved bearer token without a destination allowlist. The source does not show a package-selected recipient or a fixed gateway, so the conditional behavior does not establish malicious credential theft.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user sets TASKLESS_API_URL or configures apiUrl in the local Taskless configuration.
Impact
The configured endpoint can receive the Taskless session token.
Mechanism
The CLI builds its API client with that host and attaches the saved token as a bearer credential to API requests.
AI rationale
This warrants a warning because a custom API host receives the saved bearer token without a destination allowlist. The source does not show a package-selected recipient or a fixed gateway, so the conditional behavior does not establish malicious credential theft.
Evidence
dist/index.js
Network endpoints1
app.taskless.io/cli
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI reads a Taskless token from the environment or saved authentication.
- The API host can be set through TASKLESS_API_URL or local configuration; the default is Taskless's API.
- The shared API client sends the token as a bearer credential, and an API caller uses that client for requests.
Evidence against
- The default API host is https://app.taskless.io/cli; the inspected source does not establish a fixed unrelated recipient.
- The exposure depends on a user-configured API host; no package-selected gateway or install-time credential transfer was found.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.3-20261021055449x566b238
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.3-20261021055449x566b238
similarity = 0.929
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as nm } from "node:async_hooks";
L11: import { execFile as Jt, spawn as pt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as Wu, ENGINES as qe, ENGINE_LAYOUTS as Et, RULE_TESTS_DIRECTORY as me, isKnownEngine as Yt } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as Ug, globSync as la, readdirSync as Bg, existsSync as $n, readFileSync as Pu, rmSync as Du, mkdtempSync as Vg, writeFileSync as qg } from "node:fs";
import { readFile as C, mkdir as z, writeFile as D, rm as ne, readdir as H, stat as we, mkdtemp as ca, copyFile as Bu, glob as Vu, access as qu, readlink as Hg, chmod as Jg, rename...
import tm, { createInterface as ls } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new v0(), this._events = new R0(), this._isInitialized = !1, _0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumAi Review Evidencedist/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.3-20261021090255xd06b489.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.3-20261021090255xd06b489 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.