@tenux/cli@1.0.7
Access your computer from your phone — Tenux pairs a mobile browser IDE with an agent that runs on your own machine.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe CLI’s default `start` path enables Sentry error reporting and includes a machine identifier, without disclosure in the inspected package description. The available opt-outs reduce risk, but undisclosed runtime telemetry warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running `tenux start`, unless telemetry is disabled or a Sentry DSN is already configured.
Impact
Error reports and a machine identifier may be sent to the package’s Sentry project without clear disclosure to the user.
Mechanism
The CLI initializes Sentry with a built-in DSN, includes the machine hostname or Fly machine ID, and reports exceptions with context.
AI rationale
The CLI’s default `start` path enables Sentry error reporting and includes a machine identifier, without disclosure in the inspected package description. The available opt-outs reduce risk, but undisclosed runtime telemetry warrants a warning.
Evidence
dist/main-3K3CGUGY.jspackage.json
Network endpoints1
o4511294255267840.ingest.us.sentry.io
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On `tenux start`, the CLI sets a built-in Sentry DSN by default unless telemetry is disabled or a DSN is already set.
- Sentry is initialized with the machine hostname or Fly machine ID as `serverName`.
- The error reporter sends exceptions and the supplied context to Sentry; the package provides `DO_NOT_TRACK` and `TENUX_TELEMETRY` opt-outs, but the collection is not disclosed in the inspected package description.
Evidence against
- The package describes a local agent that bridges a computer to Tenux’s mobile IDE, consistent with its CLI purpose.
- Login sends its token to the configured Tenux app URL, which defaults to `https://tenux.dev`.
- The Sentry setup is limited to the `start` command and can be disabled through environment settings.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
Source & flagged code
11 flaggeddist/restart-helper.jsView file
3// src/lib/restart/restart-helper-main.ts
L4: import { spawn as spawn2 } from "child_process";
L5: import { appendFileSync, closeSync, existsSync as existsSync2, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, renameSync, rmSync as rmSync2, statSync, writeFileS...
High
Child Process
Package source references child process execution.
dist/restart-helper.jsView on unpkg · L3dist/chunk-MBXS3NBT.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @tenux/cli@1.0.6
matchedIdentity = npm:QHRlbnV4L2NsaQ:1.0.6
similarity = 0.577
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-MBXS3NBT.jsView on unpkg103const timeout = setTimeout(() => controller.abort(), isHeartbeat ? 3e4 : 15e3);
L104: return fetch(url, { ...options, signal: controller.signal }).finally(() => clearTimeout(timeout));
L105: }
...
L234: return {
L235: base64: buffer.toString("base64"),
L236: finalUrl: page.url(),
...
L386: /** Currently-registered hostname, or null if not yet handshaken. */
L387: get currentHostname() {
L388: return this.hostname;
...
L437: this.lastPongAt = Date.now();
L438: ws.send(
L439: encodeFrame({
Findings
1 Critical6 High5 Medium10 Low
CriticalPrevious Version Dangerous Deltadist/chunk-MBXS3NBT.js
HighChild Processdist/restart-helper.js
HighCredential Redirect Persistencedist/main-3K3CGUGY.js
HighCommand Output Exfiltrationdist/chunk-MBXS3NBT.js
HighCross File Remote Execution Contextdist/chunk-MBXS3NBT.js
HighShips High Entropy Blobdist/vendor/scrcpy/scrcpy-server-v3.3.4.jar
HighSemantic Analysis Limiteddist/chunk-MBXS3NBT.js
MediumDynamic Requiredist/chunk-MBXS3NBT.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdist/vendor/scrcpy/scrcpy-server-v3.3.4.jar
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @tenux/cli@1.0.7.
See all versions of @tenux/cli for other recorded verdicts.
- Review the evidence and your use of @tenux/cli@1.0.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.