@taskless/cli-nightly@0.13.5-20261103192215x06c2e6b
Nightly build of [`@taskless/cli`](https://www.npmjs.com/package/@taskless/cli) — the same source and the same build, published from an unreleased commit on `main`.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe CLI sends runtime telemetry to its own analytics host and offers opt-outs, but it includes the raw GitHub owner from the repository URL while describing the telemetry as anonymous. This is a privacy risk, not evidence of credential theft or a malicious install hook.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI invocation that reaches normal completion; telemetry can be disabled with `TASKLESS_TELEMETRY_DISABLED=1` or `telemetry: false` in `.taskless/taskless.json`.
Impact
Taskless analytics can associate CLI usage with a GitHub repository owner, despite the telemetry being described as anonymous.
Mechanism
Telemetry is sent to `https://z.taskless.io` and includes `ghOwner` parsed from the repository URL, alongside workspace and repository identifiers.
AI rationale
The CLI sends runtime telemetry to its own analytics host and offers opt-outs, but it includes the raw GitHub owner from the repository URL while describing the telemetry as anonymous. This is a privacy risk, not evidence of credential theft or a malicious install hook.
Evidence
dist/index.js.taskless/anonymous_id.taskless/taskless.json
Network endpoints2
z.taskless.ioapp.taskless.io/cli
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On normal CLI completion, the code initializes telemetry and emits a `cli_run` event.
- Telemetry is sent to `https://z.taskless.io` with a raw `ghOwner` field and workspace and repository identifiers.
- The `ghOwner` value is taken from the repository URL, so it can identify the GitHub owner despite the telemetry being described as anonymous.
- The package discloses telemetry and provides opt-outs, but the raw repository owner is an identifying detail.
Evidence against
- The package manifest has no install lifecycle hooks.
- The launcher copies `.npmrc` only into a temporary install directory, uses `npm ci --ignore-scripts`, and removes the copied file.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli-nightly@0.13.5-20261102164414x312732c
matchedIdentity = npm:QHRhc2tsZXNzL2NsaS1uaWdodGx5:0.13.5-20261102164414x312732c
similarity = 0.733
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as cy } from "node:async_hooks";
L11: import { execFile as sn, spawn as Yt } from "node:child_process";
L12: import { R as ee, T as Sf, E as Ve, a as Qe, b as ve, L as Ie, i as rn } from "./index-QQC7OE4T.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as F, mkdir as q, writeFile as D, rm as Q, readdir as J, stat as ue, glob as $f, access as Ea, readlink as ty, chmod as ny, rename as st, cp as sy, rmdir as Ei, l...
import ly, { createInterface as sr } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new N0(), this._events = new q0(), this._isInitialized = !1, D0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new mn(`Your project key or personal API key is invalid. Setting next polling interval to ${this.getPollingInterval()}ms. More information: https://posth...
throw this.beginB
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumAi Review Evidencedist/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli-nightly@0.13.5-20261103192215x06c2e6b.
See all versions of @taskless/cli-nightly for other recorded verdicts.
- Review the evidence and your use of @taskless/cli-nightly@0.13.5-20261103192215x06c2e6b before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.