registry / @tonbo/yield / 0.5.0
@tonbo/yield@0.5.0
Tonbo Yield: capture your agents' sessions on every machine and list them from any.
AI Security Review
scanned 17h ago · by lpm-firewall-aiThe manifest and bundle describe a session-capture CLI that sends its feature data to Tonbo’s API using Tonbo account credentials. The scanner’s apparent credential redirect and download-and-run leads resolve to fake filter examples and a printed upgrade instruction, respectively.
Static reason
One or more suspicious static signals were detected.
Trigger
The user invokes the Yield CLI; session capture and account operations use the configured Tonbo account.
Impact
Session data is handled by the package’s stated capture feature; the inspected source showed no unrelated credential redirection or automatic download-and-execute behavior.
Mechanism
The CLI sends feature data to its Tonbo service using a Tonbo account credential. The scanner’s credential matches are fake filter-test examples, and the apparent shell command is displayed as upgrade guidance.
AI rationale
The manifest and bundle describe a session-capture CLI that sends its feature data to Tonbo’s API using Tonbo account credentials. The scanner’s apparent credential redirect and download-and-run leads resolve to fake filter examples and a printed upgrade instruction, respectively.
Evidence
package.jsondist/bin/yield.js
Network endpoints1
api.tonbo.dev
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes Yield as capturing agents’ sessions and exposes dist/bin/yield.js as its CLI.
- The bundled API client defaults to https://api.tonbo.dev, consistent with the package’s Tonbo service.
- The credential code uses TONBO_API_KEY or the Tonbo CLI login as the account credential for commands.
- The bundle describes an on-device secret filter for team session capture; the credential-like strings flagged by the scanner occur in filter test vectors as fake examples.
Evidence against
- Using a CLI login is required for account operations, and the source describes that credential as belonging to the account the command acts in.
- A download-and-run scanner match is an upgrade command in an error message, not an automatically executed shell command.
- No install lifecycle scripts are declared.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
6 flaggeddist/bin/yield.jsView file
5979patternName = github_pat
severity = critical
line = 5979
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/bin/yield.jsView on unpkg · L59795979patternName = github_pat
severity = critical
line = 5979
Critical
Secret Pattern
GitHub personal access token in dist/bin/yield.js
dist/bin/yield.jsView on unpkg · L5979•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/bin/yield.js:
import { mkdir as mkdir17, readFile as readFile24, realpath as realpath12, stat as stat12, writeFile as writeFile8 } from "node:fs/promises";
import { createInterface as createInterface2 } from "node:readline/promises";
"description": "Where a client takes its credential, first match wins. A library takes an explicit option first; the CLIs have none. `env` is an API key of one account (TONBO_API_K...
headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
const headers = { authorization: `Bearer ${key}` };
await handle.writeFile(`${JSON.stringify(value, null, 2)}
await handle.writeFile(JSON.s
High
Findings
2 Critical1 High2 Medium7 Low
CriticalCritical Secretdist/bin/yield.js
CriticalSecret Patterndist/bin/yield.js
HighCredential Redirect Persistencedist/bin/yield.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/bin/yield.js
LowAi Review Evidencedist/bin/yield.js
Affected versions and remediation
This report applies to @tonbo/yield@0.5.0.
See all versions of @tonbo/yield for other recorded verdicts.
- Review the evidence and your use of @tonbo/yield@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.