registry / @togglhq/cli / 1.13.22
@togglhq/cli@1.13.22
Toggl CLI for Toggl 2.0 API operations.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe manifest has no install hook, and inspected runtime excerpts show user-invoked CLI behavior, Toggl API authentication, and agent skill-path discovery. The scanner signals do not establish credential theft or command-output exfiltration in the inspected source.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the CLI or an exposed library entrypoint.
Impact
No unconsented credential transfer, command-output exfiltration, or agent configuration mutation was established in the inspected excerpts.
Mechanism
The CLI processes user-supplied arguments, uses Toggl API configuration, and includes telemetry and skill-discovery dependencies.
AI rationale
The manifest has no install hook, and inspected runtime excerpts show user-invoked CLI behavior, Toggl API authentication, and agent skill-path discovery. The scanner signals do not establish credential theft or command-output exfiltration in the inspected source.
Evidence
package.jsonbuild/cli.jsbuild/program-CstPOFzt.js.lpm-dependency-evidence-3987a5d0-4acc-4d7b-bfa6-332075fbd65d/1/npm-linux/dist/cli.mjs.lpm-dependency-evidence-3987a5d0-4acc-4d7b-bfa6-332075fbd65d/0/npm-linux/package.json.lpm-dependency-evidence-3987a5d0-4acc-4d7b-bfa6-332075fbd65d/0/npm-linux/build/esm/index.js.lpm-dependency-evidence-3987a5d0-4acc-4d7b-bfa6-332075fbd65d/0/npm-linux/build/cjs/index.js.lpm-dependency-evidence-3987a5d0-4acc-4d7b-bfa6-332075fbd65d/0/npm-linux/build/cjs/integrations/tracing/fastify/v3/constants.js
Network endpoints1
accounts.toggl.com
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the Toggl executable and library entrypoints; it declares no install lifecycle hook.
- The executable starts CLI telemetry and parses the arguments supplied by the user.
- The Accounts API URL defaults to Toggl’s production service and can be overridden through configuration; OAuth uses that URL for authorization and code exchange.
- The `skills` dependency searches standard agent skill directories; the inspected excerpt shows path discovery only.
- The inspected `@sentry/node` manifest identifies the dependency, and its entrypoints export telemetry integrations.
- The Fastify constants excerpt identifies vendored OpenTelemetry integration code; no attack behavior was established in the inspected source.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbuild/program-CstPOFzt.jsView file
6import { fileURLToPath } from "node:url";
L7: import { exec, spawn } from "node:child_process";
L8: import process$1 from "node:process";
High
Child Process
Package source references child process execution.
build/program-CstPOFzt.jsView on unpkg · L61830if (process$3.versions?.electron) parseOptions.from = "electron";
L1831: const execArgv = process$3.execArgv ?? [];
L1832: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) parseOptions.from = "eval";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
build/program-CstPOFzt.js:
import * as readline from "node:readline";
import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
import { createInterface } from "node:readline/promises";
function readline$1() {
const cleanFn = cb(readline$1());
* Returns the width of the active readline, or 80 as default value.
function readlineWidth() {
output: readline$1().output
Findings
5 High2 Medium5 Low
HighChild Processbuild/program-CstPOFzt.js
HighShellbuild/program-CstPOFzt.js
HighCredential Redirect Persistencebuild/program-CstPOFzt.js
HighCommand Output Exfiltrationbuild/program-CstPOFzt.js
HighTrigger Reachable Command Output Exfiltrationbuild/program-CstPOFzt.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @togglhq/cli@1.13.22.
See all versions of @togglhq/cli for other recorded verdicts.
- Review the evidence and your use of @togglhq/cli@1.13.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.