registry / @testmuai/kane-cli / 0.6.1

@testmuai/kane-cli@0.6.1

KaneAI Terminal UI — browser automation testing agent

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `kane-cli install skill [version]`.

Impact

Downloaded instructions/content gain availability to supported local AI agents after restart.

Mechanism

Remote skill download, tar extraction, and AI-agent skill-directory replacement.

Rationale

The package contains an explicit-user-command AI-agent skill installer, so it warrants a warning for capability risk. Source inspection found no automatic lifecycle activation or concrete malicious chain.

Evidence

package.jsonbin/kane-cli.jsdist/index.jsdist/skill-installer-BJLHH3DW.jsdist/chunk-HMGNPFXP.jsdist/chunk-7SUKUJO2.js~/.claude/skills/kane-cli~/.agents/skills/kane-cli~/.gemini/skills/kane-cli

Network endpoints1

registry.npmjs.org

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/index.js` exposes explicit `install skill` command.
`dist/skill-installer-BJLHH3DW.js` downloads a remote skill tarball and extracts it with `tar`.
`dist/skill-installer-BJLHH3DW.js` replaces agent skill directories before copying downloaded content.
`dist/chunk-HMGNPFXP.js` targets Claude, Codex, and Gemini skill paths.

Evidence against

`package.json` has no lifecycle scripts.
`bin/kane-cli.js` only imports the CLI entrypoint; installation does not invoke skill setup.
Agent-directory writes require the user-invoked `kane-cli install skill` command.
No credential harvesting, stealth persistence, destructive broad deletion, or exfiltration chain was confirmed.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 186 file(s), 2.34 MB of source, external domains: 127.0.0.1, accounts.lambdatest.com, api-hyperexecute.lambdatest.com, api-stage-hyperexecute.lambdatestinternal.com, api.github.com, api.lambdatest.com, auteur-stage-automind.lambdatestinternal.com, auth.lambdatest.com, dd-proxy.lambdatest.com, dl.google.com, evidence-cli.dev, evidence.lambdatest.com, example.com, feross.org, github.com, json-schema.org, kaneai-api.lambdatest.com, kaneai-playground.lambdatest.io, raw.githubusercontent.com, reactjs.org, registry.npmjs.org, sheetjs.com, stage-accounts.lambdatestinternal.com, stage-api.lambdatestinternal.com, stage-auth.lambdatestinternal.com, stage-evidence.lambdatestinternal.com, stage-test-manager-api.lambdatestinternal.com, stage-test-manager.lambdatestinternal.com, test-manager-api.lambdatest.com, test-manager.lambdatest.com, www.google.com, www.testmuai.com

Source & flagged code

7 flagged

dist/chunk-WGG5XURS.jsView file

Lines 1-14javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{b,c as ge,d as ct,f as ve,g as he}from"./chunk-FYOCF7DY.js";import{a as at,e as N,f as J,g as dt,h as te,i as U,j as ut}from"./chunk-RGEAEAZB.js";import{a as oe}from"./chunk-BC7UVJJB.js";import{a as K,b as W,d as st}from"./chunk-NFOBDHZK.js";import{d as ft}from"./chunk-KHDUQ33H.js";import{a as T,b as S}from"./chunk-L5LI2JF4.js";import{a as O}from"./chunk-D5T4ARTB.js";import{b as ie}from"./chunk-AE6SS34N.js";import{a as pt}from"./chunk-GIRXJOJI.js";import{e as re,g as ne}from"./chunk-B2PZAB7J.js";import{d as R,e as H,f as lt}from"./chunk-IACKIGPX.js";import{a as ot}from"./chunk-KGP7NSXH. ...

3`),await se.rename(o,i)}async function er(e){try{let t=await vt(e);return t&&Array.isArray(t.executions)?t.executions:[]}catch{return[]}}async function tr(e,t,r=process.cwd()){let n=await ve(e,r);if(!n){let o=`evidence: no pack found for "${e}"`;return t.json?console.log(JSON.stringify({valid:!1,error:"not_found",target:e})):console.error(o),2}let i=await K(n,t.profile??"L1");return t.json?console.log(JSON.stringify({valid:i.valid,status:i.status,diagnostics:i.diagnostics})):console.log(`evidence: ${i.valid?"valid":"INVALID"} (${t.profile??"L1"}, status ${i.status})`),i.valid?0:1}function Te(e ...

4`;cr(wt(e,"diagnostics.ndjson"),o)}catch{}}import{promises as $}from"fs";import{join as G}from"path";async function ar(e){try{let t=G(e,"tests"),r=await $.readdir(t).catch(()=>[]);for(

5`)){let s=/^@import\s+(\S+)\s*$/.exec(a.trim());if(!s)continue;let u=Ft(s[1])?s[1]:Lt($t(i),s[1]);ze(u)&&U(Z(u,"utf8"))?.id&&n(u)}t.push({path:i})};return n(e),t}function At(e,t){let r=e.resolve(t),n=r?e.tipOf(r.cid):null;return!!(r&&n&&!e.superseded.has(n)&&e.nodeLabel.get(n)==="ac")}function Vr(e,t,r,n,i,o){let a=t.getNode(r);if(!a)return{oracleTier:!1,error:"tip unreadable"};let s=ut(n),u=String(a.content.test_md_blob??""),c=/^#\s+(.+?)\s*$/m.exec(s)?.[1]??String(a.content.title??""),d={...a.content,test_md_blob:s,definitionId:i,title:c},p=lt("test",d);if(p.length>0)return{oracleTier:!1,err ...

High

Child Process

Package source references child process execution.

dist/chunk-WGG5XURS.jsView on unpkg · L3

6`),n=!1;for(let i of r){if(/^##\s/.test(i)){n=/\bassert\b/i.test(i);let o=Br.exec(i);o&&t.push(`v:${o[1].trim()}`);continue}n&&

7`)}function Dt(e,t,r,n){try{let i=t.split(`

8`),o=-1;if(i[0]?.trim()==="---"){for(let u=1;u<i.length;u++)if(i[u].trim()==="---"){o=u;break}}if(o<0)return;let a=!1;for(let

9`)),Nr(s,e)}catch(i){n.push(`sync: pin refresh failed for ${e} (${i instanceof Error?i.message:String(i)}) \u2014 next run self-heals`)}}var Wr={passed:"passed",failed:"failed",broken:"blocked",skipped:"not-run"},jt=(e,t)=>{try

10`)),i=d=>(n(`error: ${d}`),2);if(t.env!=="prod"&&t.env!=="stage")return i(`invalid --env: ${String(t.env)} (expected prod or stage)`);if(t.port!==void 0&&(!Number.isInteger(t.port)||t.port<1||t.port>65535))return i("invalid --port: expected an integer 1-65535");let o;try{o=Q(t.env,t.viewerUrl),new URL(o)}catch{return i(`invalid --viewer-url: ${t.viewerUrl}`)}if(e.length===0)return i("no pack paths given");let a=new Map;for(let d of e){let p=ln(d),l;try{l=sn(p)}catch{return i(`${d}: not found`)}if(l.isDirectory())return i(`${d}: is a directory \u2014 packs must be sealed .evidence files (run th ...

11`)),u;try{u=await Ke({packs:a,allowedOrigins:[new URL(o).origin],port:t.port,log:s})}catch(d){return i(`could not bind 127.0.0.1${t.port?`:${t.port}`:""} \u2014 ${d.message}`)}n(`serving ${a.size} pack${a.size===1?"":"s"} on http://127.0.0.1:${u.port}`);for(let d of a.keys()){let p=u.urlFor(d);n(d),n(` pack ${p}`),n(` viewer ${We(p,o)}`)}return n("press Ctrl-C to stop"),await(r.hold??fn)(),await u.close(),0}function fn(){return new Promise(e=>{let t=process.listeners("SIGINT");process.removeAllListeners("SIGINT"),process.once("SIGINT",()=>{for(let r of t)process.on("SIGINT",r);e()})})}im ...

12`)),o=n.err??(l=>process.stderr.write(l+`

13`)),a=l=>(o(`evidence merge: ${l}`),2);if(!t.runId)return a("--run-id is required (merged identity is the caller's fact)");if(t.rules&&t.onCollision)return a("--rules and --on-collision are mutually exclusive");let s="error";if(t.onCollision!==void 0&&(s=Vt(t.onCollision),!s))return a(`invalid --on-collision: ${t.onCollision} (expected error | prefer-first | prefer-latest | discard)`);let u=[];for(let l of e){let v=await wn(l,r);if(!v)return a(`no pack found for "${l}"`);u.push(v)}let c=t.out?Ze(r,t.out):b(t.runId,r),d=null,p;t.rules?p=Ze(r,t.rules):(d=await de.mkdtemp(Ut(vn(),"kane-merge-rule ...

Long lines were clipped for display.

dist/chunk-NFOBDHZK.jsView file

Lines 1-25javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{a as H,c as v,e as xg}from"./chunk-UR6MHSHU.js";var dt=v(Le=>{"use strict";Object.

dist/chunk-WAGJLR5X.jsView file

Lines 1-21javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{a as Ge}from"./chunk-KHU7C6EE.js";import{a as je,b as Me}from"./chunk-NNZV5RCE.js";import{a as Ae,b as

dist/chunk-47RNFG2V.jsView file

Lines 1-21javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{a as da}from"./chunk-ZA67EBYF.js";import{a as zs,b as Vo,c as xn,d as Ys,e as vn,f as Ks,h

dist/index.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2import { createRequire } from 'module'; const require = createRequire(import.meta.url);

3import{c as Qe}from"./chunk-7SUKUJO2.js";import{a as yn,b as Co,c as xo,d as Eo}from

dist/chunk-RFHMDQXZ.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @testmuai/kane-cli@0.4.10 matchedIdentity = npm:QHRlc3RtdWFpL2thbmUtY2xp:0.4.10 similarity = 0.363 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-RFHMDQXZ.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/chunk-WGG5XURS.jsView file

3`),await se.rename(o,i)}async function er(e){try{let t=await vt(e);return t&&Array.isArray(t.executions)?t.executions:[]}catch{return[]}}async function tr(e,t,r=process.cwd()){let ... L4: `;cr(wt(e,"diagnostics.ndjson"),o)}catch{}}import{promises as $}from"fs";import{join as G}from"path";async function ar(e){try{let t=G(e,"tests"),r=await $.readdir(t).catch(()=>[]);... L5: `)){let s=/^@import\s+(\S+)\s*$/.exec(a.trim());if(!s)continue;let u=Ft(s[1])?s[1]:Lt($t(i),s[1]);ze(u)&&U(Z(u,"utf8"))?.id&&n(u)}t.push({path:i})};return n(e),t}function At(e,t){l...

High

Child Process

Package source references child process execution.

dist/chunk-WGG5XURS.jsView on unpkg · L3

dist/chunk-NFOBDHZK.jsView file

5|| (${a} === "string" && ${s} && ${s} == +${s} && !(${s} % 1))`).assign(o,(0,C._)`+${s}`);return;case"boolean":n.elseIf((0,C._)`${s} === "false" || ${s} === 0 || ${s} === null`).as... L6: || ${a} === "boolean" || ${s} === null`).assign(o,(0,C._)`[${s}]`)}}}function m_({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,C._)`${e} !== undefined`,()=>t.assign((0,C._)`... L7: missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-NFOBDHZK.jsView on unpkg · L5

dist/chunk-WAGJLR5X.jsView file

1import { createRequire } from 'module'; const require = createRequire(import.meta.url); L2: import{a as Ge}from"./chunk-KHU7C6EE.js";import{a as je,b as Me}from"./chunk-NNZV5RCE.js";import{a as Ae,b as Te,c as Oe,f as Ie,g as Pe}from"./chunk-7DBQEOFL.js";import{a as Ce}fr...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-WAGJLR5X.jsView on unpkg · L1

dist/chunk-47RNFG2V.jsView file

1import { createRequire } from 'module'; const require = createRequire(import.meta.url); L2: import{a as da}from"./chunk-ZA67EBYF.js";import{a as zs,b as Vo,c as xn,d as Ys,e as vn,f as Ks,h as Js,i as Qs,j as Zs,k as ea,l as ta,m as St,n as ra,o as na,p as oa,q as bn,r as... L3: `;ig(i,{recursive:!0}),sg(a,f)}catch{}return a}var ke=k(M(),1);async function lg(e){let t=e?.getResolvedBasicAuth?.();if(t)return{username:t.username,access_key:t.access_key};let r... L4: `)}catch{}},[i]),et=(0,Z.useCallback)((X,Q)=>{let Y=Wl(Ce.current,Q.phase,X),G=typeof X?.status=="number"?X.status:void 0;Be(`${Q.phase}_error`,{errorCode:`${Q.phase}_failed`,statu... L5: `));return}if(zl(ae))return;et(ae,{phase:"upload"});return}finally{Ke.current=!1,Jt(!1),$e.current===ye&&($e.current=null)}if(!ye.signal.aborted){for(let ae of We.warnings)e.emitFe... L6: `));return}if(zl(ce))return;et(ce,{phase:"upload"});return}finally{Ke.current=!1,Jt(!1),$e.current===Y&&($e.current=null)}if(!Y.signal.aborted){for(let ce of G.warnings)e.emitFeedb... L7: `),pg(t,this.path)}catch(t){process.stderr.write(`[hints] Failed to save state: ${t instanceof Error?t.message:String(t)} ... L9: `),bg(o,r)}catch(n){process.stderr

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-47RNFG2V.jsView on unpkg · L1

dist/index.jsView file

14Expecting one of '${o.join("', '")}'`);return this._lifeCycleHooks[e]?this._lifeCycleHooks[e].push(t):this._lifeCycleHooks[e]=[t],this}exitOverride(e){return e?this._exitCallback=e... L15: - already used by option '${t.flags}'`)}this.options.push(e)}_registerCommand(e){let t=n=>[n.name()].concat(n.aliases()),o=t(e).find(n=>this._findCommand(n));if(o){let n=t(this._f... L16: - if '${e._name}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead ... L25: `)}async function Yo(i,e,t){let o=Sn(i,e);ze().then(p=>{p&&Ce({type:"update_available",current:p.current,latest:p.latest,severity:p.severity})}).catch(()=>{}),Qe().then(p=>{p&&Ce({... L26: `),process.exit(2));let{runListTui:t,resolveCurrentOrgId:o}=await import("./testmd-actions-FMVUXZGX.js"),n=await o({});n.ok||process.exit(n.code),process.exit(await t(n.orgId))});u... L27: `),process.exit(2)),process.exit(await r(t,o))}),e.command("revert <seq>").description("Invert a record's effects via a compensation record \u2014 history is never rewritten").opti... ... L29: `)[0]}`)},signal:i.signal}}async function fr(i,e,t,o,n=ko){let r=he(i.relPath),s=Date.now();try{l

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L14

2Cross-file remote execution chain: dist/index.js spawns dist/chunk-HCBYKLMW.js; helper contains network access plus dynamic code execution. L2: import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: import{c as Qe}from"./chunk-7SUKUJO2.js";import{a as yn,b as Co,c as xo,d as Eo}from"./chunk-47RNFG2V.js";import"./chunk-ZA67EBYF.js";import"./chunk-R2K2SGGE.js";import{i as Ao}fro... L4: `).replace(/^/gm," ".repeat(r))}let c=[`Usage: ${t.commandUsage(e)}`,""],d=t.commandDescription(e);d.length>0&&(c=c.concat([t.wrap(d,n,0),""]));let h=t.visibleArguments(e).map(u=>a... ... L11: (Did you mean one of ${o.join(", ")}?)`:o.length===1?` L12: (Did you mean ${o[0]}?)`:""}Po.suggestSimilar=ei});var Fo=ye(No=>{"use strict";var ti=Te("events").EventEmitter,Rt=Te("child_process"),de=Te("path"),Ot=Te("fs"),j=Te("process"),{Ar... L13: - specify the name in Command constructor or using .name()`);return t=t||{},t.isDefault&&(this._defaultCommandName=e._name),(t.noHelp||t.hidden)&&(e._hidden=!0),this._registerComma... ... L24: `)}),this}_outputHelpIfRequested(e){let t=this._getHelpOption();t&&e.find(n=>t.is(n))&&(this.outputHelp(),this._exit(0,"commander.helpDispla…

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L2

dist/chunk-RFHMDQXZ.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-RFHMDQXZ.jsView on unpkg

Findings

1 Critical4 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/chunk-RFHMDQXZ.js

HighChild Processdist/chunk-WGG5XURS.js

HighSame File Env Network Executiondist/index.js

HighCross File Remote Execution Contextdist/index.js

HighObfuscated

MediumDynamic Requiredist/chunk-WAGJLR5X.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEvaldist/chunk-NFOBDHZK.js

LowWeak Cryptodist/chunk-47RNFG2V.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/chunk-WGG5XURS.jsView file

Lines 1-14javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

4`;cr(wt(e,"diagnostics.ndjson"),o)}catch{}}import{promises as $}from"fs";import{join as G}from"path";async function ar(e){try{let t=G(e,"tests"),r=await $.readdir(t).catch(()=>[]);for(

High

Child Process

Package source references child process execution.

dist/chunk-WGG5XURS.jsView on unpkg · L3

6`),n=!1;for(let i of r){if(/^##\s/.test(i)){n=/\bassert\b/i.test(i);let o=Br.exec(i);o&&t.push(`v:${o[1].trim()}`);continue}n&&

7`)}function Dt(e,t,r,n){try{let i=t.split(`

8`),o=-1;if(i[0]?.trim()==="---"){for(let u=1;u<i.length;u++)if(i[u].trim()==="---"){o=u;break}}if(o<0)return;let a=!1;for(let

12`)),o=n.err??(l=>process.stderr.write(l+`

Long lines were clipped for display.

dist/chunk-NFOBDHZK.jsView file

Lines 1-25javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{a as H,c as v,e as xg}from"./chunk-UR6MHSHU.js";var dt=v(Le=>{"use strict";Object.

dist/chunk-WAGJLR5X.jsView file

Lines 1-21javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{a as Ge}from"./chunk-KHU7C6EE.js";import{a as je,b as Me}from"./chunk-NNZV5RCE.js";import{a as Ae,b as

dist/chunk-47RNFG2V.jsView file

Lines 1-21javascript

1import { createRequire } from 'module'; const require = createRequire(import.meta.url);

2import{a as da}from"./chunk-ZA67EBYF.js";import{a as zs,b as Vo,c as xn,d as Ys,e as vn,f as Ks,h

dist/index.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2import { createRequire } from 'module'; const require = createRequire(import.meta.url);

3import{c as Qe}from"./chunk-7SUKUJO2.js";import{a as yn,b as Co,c as xo,d as Eo}from

dist/chunk-RFHMDQXZ.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-RFHMDQXZ.jsView on unpkg