@taskless/cli-nightly@0.13.4-20261023150811x3b28ed5
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe CLI sends its existing bearer token to an API URL that can be overridden without a destination binding, so conditional credential exposure warrants a warning. The default URL is the Taskless service, and the inspected source does not establish a block-worthy fixed recipient or transfer.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI command makes an authenticated API request while TASKLESS_API_URL or config.json apiUrl points to a custom recipient.
Impact
The configured recipient can receive the token; the source does not establish that this happens with the default service URL.
Mechanism
The API client selects the override without binding it to the Taskless service and attaches the existing token as a bearer credential.
AI rationale
The CLI sends its existing bearer token to an API URL that can be overridden without a destination binding, so conditional credential exposure warrants a warning. The default URL is the Taskless service, and the inspected source does not establish a block-worthy fixed recipient or transfer.
Evidence
dist/index.js
Network endpoints1
app.taskless.io/cli
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes dist/index.js as its CLI entrypoint.
- The CLI uses a token from TASKLESS_TOKEN or saved local authentication.
- TASKLESS_API_URL or apiUrl in config.json can override the default API URL, with no destination binding in the selection code.
- The API client adds the token as a bearer credential; a saved-token status check uses that client for a request.
- The default API URL is the Taskless service; the concern depends on a configured override.
Evidence against
- The inspected code does not show a fixed unrelated recipient or an unconditional token transfer.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.4-20261022195405x50b7ee6
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.4-20261022195405x50b7ee6
similarity = 0.857
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as vm } from "node:async_hooks";
L11: import { execFile as en, spawn as bt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as Xu, ENGINES as Ke, ENGINE_LAYOUTS as Lt, RULE_TESTS_DIRECTORY as we, isKnownEngine as tn } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as rm, globSync as gi, readdirSync as qu, existsSync as yt, statSync as om, readFileSync as Wu, rmSync as Gu, mkdtempSync as am, writeFileSync as lm } fro...
import { readFile as P, mkdir as z, writeFile as U, rm as ne, readdir as J, stat as de, mkdtemp as ga, copyFile as Ju, glob as Yu, access as Qu, readlink as dm, chmod as hm, rename...
import bm, { createInterface as hs } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Bw(), this._events = new Qw(), this._isInitialized = !1, Kw(t, "You must pass your PostHog project's ...
throw this.beginB
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumAi Review Evidencepackage.json
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261023150811x3b28ed5.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261023150811x3b28ed5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.