registry / @thinkingai/ae-cli / 6.0.32

@thinkingai/ae-cli@6.0.32

CLI tool for ThinkingAI (AE) analytics platform

AI Security Review

scanned 14h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs ae-cli sync, selects resources, and optionally passes --include-secrets.

Impact

Selected agent configuration and opt-in secrets may leave the workspace; selected Skills may be installed into the workspace.

Mechanism

User-invoked AI-agent configuration synchronization.

Rationale

Source inspection found an explicit, guarded agent sync capability with optional secret export and workspace writes, but no unconsented lifecycle execution, stealth exfiltration, or payload execution. This warrants a warning under the agent-control policy rather than a block.

Evidence

package.jsondist/sync-ERNHDPB5.jsdist/chunk-EGEIXA2Z.jsdist/chunk-R77JT7XD.jsdist/auth-7H3HAAJ3.jsworkspace/.claude/skillsworkspace/.mcp.jsonworkspace/.claude/.claude.jsonworkspace/.mcp-manifest.jsonworkspace/.skill-manifest.json

Network endpoints1

registry.npmjs.org

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

dist/sync-ERNHDPB5.js reads workspace Skills and MCP configs, then uploads selected items.
The explicit --include-secrets option sends selected MCP TOKEN/SECRET/KEY environment values.
sync pull can copy Skill packages and update workspace manifest files.
dist/chunk-R77JT7XD.js reads sandbox credentials and signs requests to the configured main app.

Evidence against

package.json has only prepublishOnly; no install-time lifecycle hook.
Sync requires an explicit ae-cli sync invocation and interactive resource selection.
Secrets are redacted by default and stdio MCPs are excluded.
Skill/MCP names and local-copy paths are validated before mutation.
Auth browser execution is limited to http/https URLs via execFileSync.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 47 file(s), 1.45 MB of source, external domains: example.com, registry.npmjs.org, ta.thinkingdata.cn

Source & flagged code

4 flagged

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView file

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = high_entropy_blob sizeBytes = 39530 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView on unpkg

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = compressed_blob sizeBytes = 39530 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView on unpkg

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = nested_archive_needs_inspection sizeBytes = 39530 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

tracking-plan-template/阅读类APP埋点模板_v1.xlsx

Source & flagged code

4 flagged · loading source

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView file

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = high_entropy_blob sizeBytes = 39530 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView on unpkg

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = compressed_blob sizeBytes = 39530 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView on unpkg

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = nested_archive_needs_inspection sizeBytes = 39530 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

tracking-plan-template/阅读类APP埋点模板_v1.xlsx

Findings

2 High4 Medium6 Low

HighShips High Entropy Blobtracking-plan-template/阅读类APP埋点模板_v1.xlsx

HighPrevious Version Dangerous Deltadist/auth-7H3HAAJ3.js

MediumNetwork

MediumEnvironment Vars

MediumShips Compressed Blobtracking-plan-template/阅读类APP埋点模板_v1.xlsx

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectiontracking-plan-template/阅读类APP埋点模板_v1.xlsx

LPM CLI

View on unpkg

dist/auth-7H3HAAJ3.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @thinkingai/ae-cli@6.0.28 matchedIdentity = npm:QHRoaW5raW5nYWkvYWUtY2xp:6.0.28 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/auth-7H3HAAJ3.jsView on unpkg

main → dist/index.jsbin → ae-cli

Runtimenode >=20.0.0

Artifact5.55 MB · 814 files1 signature(s)

Install lifecycleprepublishOnly

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocketHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

4 flagged

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView file

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = high_entropy_blob sizeBytes = 39530 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView on unpkg

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = compressed_blob sizeBytes = 39530 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

tracking-plan-template/阅读类APP埋点模板_v1.xlsxView on unpkg

•path = tracking-plan-template/阅读类APP埋点模板_v1.xlsx kind = nested_archive_needs_inspection sizeBytes = 39530 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

tracking-plan-template/阅读类APP埋点模板_v1.xlsx

View on unpkg

dist/auth-7H3HAAJ3.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @thinkingai/ae-cli@6.0.28 matchedIdentity = npm:QHRoaW5raW5nYWkvYWUtY2xp:6.0.28 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/auth-7H3HAAJ3.jsView on unpkg