registry / @tiens.nguyen/gu-cli / 1.0.703
@tiens.nguyen/gu-cli@1.0.703
Gu CLI — the gu terminal plus the local worker that runs agent / OCR / PDF / embedding jobs on your Mac (Ollama / MLX / OpenAI-compatible).
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe lifecycle hook performs package-aligned PATH setup, while the inspected network, provider, and proxy code is consistent with the CLI’s stated functions. The reviewed evidence does not establish credential exfiltration or another concrete attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installation runs the postinstall PATH helper; other behavior starts when the user runs CLI commands or configures providers.
Impact
No concrete malicious effect was established in the inspected source.
Mechanism
The reviewed sources set up CLI PATH, call the configured worker service, reject metadata destinations in provider setup, and attach a configured proxy per request.
AI rationale
The lifecycle hook performs package-aligned PATH setup, while the inspected network, provider, and proxy code is consistent with the CLI’s stated functions. The reviewed evidence does not establish credential exfiltration or another concrete attack.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a postinstall PATH setup and CLI entry points.
- The install helper targets the user shell startup file to make the installed CLI available on PATH.
- Worker network calls support the locally configured service workflow.
- Provider setup rejects URL-embedded credentials and blocks cloud metadata destinations.
- Proxy routing is attached per request when configured.
- Client Expert behavior is separated into setup and machine-facing modules; its API health checks target loopback.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node install-path.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgproxy-selftest.mjsView file
195patternName = generic_password
severity = medium
line = 195
Medium
gu-cli.mjsView file
18import { mkdir, mkdtemp, readFile, rm, stat, writeFile } from "node:fs/promises";
L19: import { execFile as execFileCallback, spawn } from "node:child_process";
L20: import { createHash } from "node:crypto";
High
Findings
8 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processgu-cli.mjs
HighShellgu-cli.mjs
HighSame File Env Network Executiongu-cli.mjs
HighCloud Metadata Accesscoding-provider-setup.mjs
HighCopied Package Dependency Bridgeproxy-dispatcher.mjs
HighSemantic Analysis Limitedclient-expert-run.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltaclient-expert-api.mjs
MediumSecret Patternproxy-selftest.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpergonext_transcribe.py
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @tiens.nguyen/gu-cli@1.0.703.
See all versions of @tiens.nguyen/gu-cli for other recorded verdicts.
- Review the evidence and your use of @tiens.nguyen/gu-cli@1.0.703 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.