@taskless/cli-nightly@0.13.3-20261021190126x85025cb
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe source confirms that an environment or configuration override can direct authenticated requests carrying saved Taskless tokens to an unrestricted host. The normal default is the Taskless service, so this warrants a warning for conditional credential exposure, not a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
Using an authenticated CLI command while TASKLESS_API_URL or the local Taskless config selects a custom API host.
Impact
A custom host can receive the saved Taskless credential; the source does not establish that this host is malicious or that the override is covert.
Mechanism
The CLI loads an environment or saved token, then attaches it as a bearer credential to requests directed to the selected API host.
AI rationale
The source confirms that an environment or configuration override can direct authenticated requests carrying saved Taskless tokens to an unrestricted host. The normal default is the Taskless service, so this warrants a warning for conditional credential exposure, not a publish block.
Evidence
dist/index.js.taskless/config.json.taskless/.env.local.json
Network endpoints1
app.taskless.io/cli
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Saved Taskless tokens can be read and sent as bearer credentials to the API host selected by environment or local configuration.
- The normal login flow stores a token returned by that same configurable API host.
- The package exposes the reviewed bundle as its CLI and module entrypoint.
Evidence against
- Without an override, the API host defaults to app.taskless.io, consistent with the package’s stated service.
- The manifest has no install lifecycle hook; the observed transfer is in runtime authentication paths.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
10import { AsyncLocalStorage as nm } from "node:async_hooks";
L11: import { execFile as Jt, spawn as pt } from "node:child_process";
L12: import { RULES_DIRECTORY as te, TASKLESS_DIRECTORY as zu, ENGINES as qe, ENGINE_LAYOUTS as Et, RULE_TESTS_DIRECTORY as ye, isKnownEngine as Yt } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as Ug, globSync as ua, readdirSync as Bg, existsSync as $n, readFileSync as Mu, rmSync as Uu, mkdtempSync as Vg, writeFileSync as qg } from "node:fs";
import { readFile as C, mkdir as J, writeFile as D, rm as se, readdir as Y, stat as be, mkdtemp as fa, copyFile as qu, glob as Wu, access as Gu, readlink as Hg, chmod as Jg, rename...
import tm, { createInterface as ls } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new v0(), this._events = new R0(), this._isInitialized = !1, _0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgFindings
3 High3 Medium6 Low
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumAi Review Evidencedist/index.js
MediumAi Review Evidencedist/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.3-20261021190126x85025cb.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.3-20261021190126x85025cb before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.