registry / @taskless/cli / 0.11.2

@taskless/cli@0.11.2

[![npm](https://img.shields.io/npm/v/@taskless/cli)](https://www.npmjs.com/package/@taskless/cli) [![build](https://img.shields.io/github/actions/workflow/status/taskless/cli/validate.yml?branch=main)](https://github.com/taskless/cli/actions/workflows/val

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Static inspection found no install lifecycle execution, credential exfiltration, remote payload execution, or destructive behavior. The observed agent setup is command-invoked and telemetry has explicit disable controls.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the CLI, including the explicit init command.

Impact

No confirmed malicious impact or unconsented install-time mutation was found.

Mechanism

No automatic npm lifecycle hook is declared; init performs the package's requested setup work.

AI rationale

Network endpoints1

z.taskless.io

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package scripts contain no npm preinstall, install, or postinstall lifecycle hook.
Telemetry can be disabled through TASKLESS_TELEMETRY_DISABLED or DO_NOT_TRACK.
Agent-skill writes are part of the explicitly invoked init command.

Evidence against

When enabled, telemetry records a GitHub owner and workspace-related dimensions.

Behavioral surface

Source

ChildProcessCryptoEvalFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 911 KB of source, external domains: api.example.com, app.taskless.io, ast-grep.github.io, docs.rs, docs.vale.sh, eu-assets.i.posthog.com, eu.i.posthog.com, example.com, github.com, json-schema.org, posthog.com, raw.githubusercontent.com, taskless.io, us-assets.i.posthog.com, us.i.posthog.com, yandex.com, z.taskless.io

Source & flagged code

4 flagged

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @taskless/cli@0.11.1 matchedIdentity = npm:QHRhc2tsZXNzL2NsaQ:0.11.1 similarity = 0.643 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/index.js: import { readFile as j, mkdir as M, writeFile as D, rm as le, readdir as ce, stat as de, mkdtemp as Va, copyFile as bf, glob as vi, access as vf, readlink as Sf, rename as qa, cp a... import { createReadStream as _f, globSync as If, existsSync as ts, readFileSync as Ga, mkdtempSync as Af, writeFileSync as Tf, rmSync as Cf } from "node:fs"; import Ff, { createInterface as Qi } from "node:readline"; this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new Lh(), this._events = new Wh(), this._isInitialized = !1, Uh(e, "You must pass your PostHog project's ... throw this.beginBackoff(), new wt(`Your pro

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

Findings

1 Critical2 High2 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/index.js

HighCredential Redirect Persistencedist/index.js

HighObfuscated Payload Loaderdist/index.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @taskless/cli@0.11.2.

See all versions of @taskless/cli for other recorded verdicts.

Review the evidence and your use of @taskless/cli@0.11.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-24 02:20:41.297Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @taskless/cli / 0.11.2

@taskless/cli@0.11.2

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the CLI, including the explicit init command.

Impact

No confirmed malicious impact or unconsented install-time mutation was found.

Mechanism

No automatic npm lifecycle hook is declared; init performs the package's requested setup work.

AI rationale

Network endpoints1

z.taskless.io

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package scripts contain no npm preinstall, install, or postinstall lifecycle hook.
Telemetry can be disabled through TASKLESS_TELEMETRY_DISABLED or DO_NOT_TRACK.
Agent-skill writes are part of the explicitly invoked init command.

Evidence against

When enabled, telemetry records a GitHub owner and workspace-related dimensions.

Behavioral surface

Source

ChildProcessCryptoEvalFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

4 flagged

dist/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/index.jsView on unpkg

Findings

1 Critical2 High2 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/index.js

HighCredential Redirect Persistencedist/index.js

HighObfuscated Payload Loaderdist/index.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @taskless/cli@0.11.2.

See all versions of @taskless/cli for other recorded verdicts.

Review the evidence and your use of @taskless/cli@0.11.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-24 02:20:41.297Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.