registry / @taskless/cli-nightly / 0.13.4-20261026181356xfcb2a39
@taskless/cli-nightly@0.13.4-20261026181356xfcb2a39
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 8d ago · by lpm-firewall-aiSource inspection found no install hook or evidence of the reported credential redirection. The executable’s inspected credential flow uses the configured Taskless API for device authorization and stores the returned token in the project directory.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the CLI’s authentication flow.
Impact
The inspected behavior supports project authentication; no credential redirection or confirmed attack surface was established.
Mechanism
The CLI requests a device code from the configured Taskless API, polls for authorization, and saves the returned token in the project configuration directory.
AI rationale
Source inspection found no install hook or evidence of the reported credential redirection. The executable’s inspected credential flow uses the configured Taskless API for device authorization and stores the returned token in the project directory.
Evidence
.taskless/.auth.json
Network endpoints1
app.taskless.io/cli
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists build and development scripts but no install lifecycle hook; the executable entry is dist/index.js.
- The CLI uses the Taskless service by default and allows an API URL to be set through configuration or the environment.
- Login requests a device code, waits for authorization, then saves the returned token for the selected project.
- The saved token is kept under the project’s .taskless directory.
- The inspected tsx dependency is a TypeScript runner, and its loader imports its runtime modules.
- The inspected ast-grep optional packages are platform-specific native tool packages.
Evidence against
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
10import { AsyncLocalStorage as km } from "node:async_hooks";
L11: import { execFile as tn, spawn as bt } from "node:child_process";
L12: import { RULES_DIRECTORY as ee, TASKLESS_DIRECTORY as ef, ENGINES as Ke, ENGINE_LAYOUTS as Lt, RULE_TESTS_DIRECTORY as we, isKnownEngine as nn } from "./layout.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { createReadStream as om, globSync as yi, readdirSync as Gu, existsSync as yt, statSync as am, readFileSync as Ku, rmSync as zu, mkdtempSync as lm, writeFileSync as cm } fro...
import { readFile as P, mkdir as H, writeFile as U, rm as se, readdir as J, stat as de, mkdtemp as ma, copyFile as Qu, glob as Xu, access as Zu, readlink as hm, chmod as pm, rename...
import vm, { createInterface as ps } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Vw(), this._events = new Xw(), this._isInitialized = !1, zw(t, "You must pass your PostHog project's ...
throw this.beginB
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkgFindings
3 High1 Medium8 Low
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.4-20261026181356xfcb2a39.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.4-20261026181356xfcb2a39 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.