registry / @taskless/cli-nightly / 0.13.4-20261022195044x0c3b4d8
@taskless/cli-nightly@0.13.4-20261022195044x0c3b4d8
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource review found no lifecycle hook or fixed unrelated credential recipient; the default authenticated API is the Taskless service. Runtime code execution is gated by server reconciliation in the ordinary path, with an explicit option required to run rules unverified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI; runtime rules normally run after server reconciliation, while unverified execution requires an explicit dangerous-run option.
Impact
No confirmed malicious impact was established.
Mechanism
The CLI sends bearer tokens to its configured API base, which defaults to the Taskless service. It also invokes git and ast-grep for repository analysis and supports verified runtime rule checks.
AI rationale
Source review found no lifecycle hook or fixed unrelated credential recipient; the default authenticated API is the Taskless service. Runtime code execution is gated by server reconciliation in the ordinary path, with an explicit option required to run rules unverified.
Network endpoints2
app.taskless.ioz.taskless.io
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points the CLI entrypoint to dist/index.js; its inspected scripts contain no npm install lifecycle hook.
- The API defaults to app.taskless.io, and bearer requests use that same configured API base. Login stores the returned token locally after success.
- Runtime check code is dynamically loaded, but ordinary execution follows server reconciliation; running all rules unverified requires the explicit --dangerously-run-scripts option.
- The inspected subprocesses invoke git for repository metadata and ast-grep for project scans.
- The required dependency excerpts identify tsx as a TypeScript loader and the optional ast-grep packages as platform-specific native tools.
- Telemetry goes to the Taskless analytics host and can be disabled through the documented environment or project setting.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.3-20261021190126x85025cb
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.3-20261021190126x85025cb
similarity = 0.929
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as lm } from "node:async_hooks";
L11: import { execFile as Xt, spawn as yt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as zu, ENGINES as Ge, ENGINE_LAYOUTS as Tt, RULE_TESTS_DIRECTORY as we, isKnownEngine as Zt } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as zg, globSync as fa, readdirSync as Kg, existsSync as $n, readFileSync as Mu, rmSync as Uu, mkdtempSync as Hg, writeFileSync as Jg } from "node:fs";
import { readFile as P, mkdir as K, writeFile as U, rm as ne, readdir as J, stat as de, mkdtemp as da, copyFile as qu, glob as Wu, access as Gu, readlink as em, chmod as tm, rename...
import am, { createInterface as fs } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new A0(), this._events = new j0(), this._isInitialized = !1, L0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(
Findings
1 Critical3 High1 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261022195044x0c3b4d8.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261022195044x0c3b4d8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.