@taskless/cli@0.13.4
[](https://www.npmjs.com/package/@taskless/cli) [](https://github.com/taskless/cli/actions/workflows/val
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package discloses runtime telemetry and provides an opt-out, but it sends a raw GitHub owner and organization identity to its analytics endpoint. That identifying telemetry makes the package suspicious under the stated review rules, rather than malicious.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Telemetry initializes during CLI use unless disabled by environment variable or project configuration.
Impact
The telemetry notice calls the data anonymous, but the raw GitHub owner can identify a user or organization; this is a privacy risk.
Mechanism
The CLI reads the GitHub owner from the repository remote and includes it, along with organization identity and repository/workspace dimensions, in telemetry sent to z.taskless.io.
AI rationale
The package discloses runtime telemetry and provides an opt-out, but it sends a raw GitHub owner and organization identity to its analytics endpoint. That identifying telemetry makes the package suspicious under the stated review rules, rather than malicious.
Evidence
dist/index.jsanonymous_id.taskless/taskless.json.taskless/.env.local.json
Network endpoints2
z.taskless.ioapp.taskless.io/cli
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Runtime telemetry is disclosed and can be disabled, but is enabled by default.
- Telemetry is sent to https://z.taskless.io with a raw GitHub owner and organization identity among its properties.
- The GitHub owner is derived from the repository remote URL, so it can identify the repository owner.
- The separate device login flow sends its authorization requests to the configurable Taskless API, which defaults to https://app.taskless.io/cli.
Evidence against
- The manifest has no install, preinstall, or postinstall lifecycle hook.
- The device login flow is a user-run authentication action for Taskless and saves the returned token locally.
- The telemetry notice describes collection as anonymous and provides environment-variable and configuration opt-outs.
Behavioral surface
ChildProcessCryptoEvalFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @taskless/cli@0.13.2
matchedIdentity = npm:QHRhc2tsZXNzL2NsaQ:0.13.2
similarity = 0.571
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg10import { AsyncLocalStorage as Hm } from "node:async_hooks";
L11: import { execFile as tn, spawn as Ht } from "node:child_process";
L12: import { R as te, T as mf, E as Ue, a as Je, b as ve, L as Te, i as nn } from "./index-QQC7OE4T.js";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
import { readFile as C, mkdir as q, writeFile as P, rm as Q, readdir as Y, stat as de, mkdtemp as er, copyFile as $a, glob as pf, access as gf, readlink as Um, chmod as Bm, rename ...
import Km, { createInterface as nr } from "node:readline";
this.flushPromise = null, this.shutdownPromise = null, this.promiseQueue = new m0(), this._events = new A0(), this._isInitialized = !1, k0(t, "You must pass your PostHog project's ...
throw this.beginBackoff(), new pn(`Your project key or personal API key is invalid. Setting next polling interval to ${this.getPollingInterval()}ms. More information: https://posth...
throw this.beginB
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumAi Review Evidencedist/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @taskless/cli@0.13.4.
See all versions of @taskless/cli for other recorded verdicts.
- Review the evidence and your use of @taskless/cli@0.13.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.