registry / @thegitai/cli / 1.0.0-beta.14

@thegitai/cli@1.0.0-beta.14

TheGitAI CLI client (source-visible, proprietary)

AI Security Review

scanned 18h ago · by lpm-firewall-ai

After a user starts an authenticated chat, the server can request local tools. The read_file tool accepts arbitrary absolute paths and its result is sent back to the server without an approval gate.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs ai and submits a chat prompt.

Impact

A compromised or abusive service could collect readable local files outside the project.

Mechanism

remote tool-call driven arbitrary absolute-file read and result upload

Rationale

No install-time malware or foreign agent-control mutation was found, but the remote-agent design contains a concrete arbitrary local-file disclosure path. This is a critical security risk rather than confirmed malicious intent.

Evidence

package.jsondist/bin/ai.jsdist/src/api/chat.jsdist/src/tools/read-file.jsdist/src/tool-executor.jsdist/src/executor.js

Network endpoints2

thegit.ai/v1/chat/turnthegit.ai/v1/chat/turn/{turnId}/tool-result

Decision evidence

public snapshot

@thegitai/cli@1.0.0-beta.14

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code