@trayai/helix-cli@0.106.0
Helix CLI — helix init, helix dev, helix auth
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package discloses runtime analytics and provides a DO_NOT_TRACK opt-out, but the payload includes projectName, an identifying detail beyond the documented exclusions. This warrants a telemetry warning; the flagged credential-redirection and command-output signals were not substantiated by the inspected source.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the init, login, dev, or deploy CLI command while logged in; DO_NOT_TRACK=1 or true disables it.
Impact
The vendor receives project-identifying metadata with usage analytics; no credential theft or command-output exfiltration was identified.
Mechanism
The CLI posts command outcome and runtime fields, including workspaceId, projectId, and projectName, with the Tray login token to private/v1/helix/analytics on the environment profile's API host.
AI rationale
The package discloses runtime analytics and provides a DO_NOT_TRACK opt-out, but the payload includes projectName, an identifying detail beyond the documented exclusions. This warrants a telemetry warning; the flagged credential-redirection and command-output signals were not substantiated by the inspected source.
Evidence
dist/cli.jsCHANGELOG.md
Network endpoints1
Environment profile API host: private/v1/helix/analytics
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI analytics payload includes workspaceId, projectId, and projectName alongside runtime and command outcome fields.
- The CLI sends that payload with the local Tray login token to the Helix analytics route; DO_NOT_TRACK=1 or true disables sending.
Evidence against
- The changelog discloses usage analytics for init, login, dev, and deploy, says it is sent only when logged in, and excludes source code, command arguments, file paths, and credentials.
- The manifest exposes a CLI bin and library entry point; no install lifecycle hook is declared.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
8 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @trayai/helix-cli@0.65.0
matchedIdentity = npm:QHRyYXlhaS9oZWxpeC1jbGk:0.65.0
similarity = 0.750
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg162${u}
L163: `:typeof f=="string"?`Deploy failed [${f}]: ${u}`:`Deploy failed: ${u}`),await d("failure",m instanceof Error&&m.name?m.name:"Error"),process.exit(1)}})}import{existsSync as fc}fro...
L164: `):r.write(`[warn] Not a valid UUID after ${Dt} attempts \u2014 skipping. Edit helix.config.ts manually.
High
157Open this link to create ${t}:`),console.log(e.url),console.error(`
L158: Press enter once you've finished in the browser.`)}function Ls(e){return Kr({message:"Finished in the browser?",default:!0})}async function Ns(e){return js({message:"Alias for this...
L159: \u2713 Workspace "${he.name}" created`);try{await $(l,he.id,{configFile:a})}catch(In){throw Ye(he,In)}console.log(` \u21B3 workspaceId ${he.id} written to ${po(a)??"helix.config.t...
...
L162: ${u}
L163: `:typeof f=="string"?`Deploy failed [${f}]: ${u}`:`Deploy failed: ${u}`),await d("failure",m instanceof Error&&m.name?m.name:"Error"),process.exit(1)}})}import{existsSync as fc}fro...
L164: `):r.write(`[warn] Not a valid UUID after ${Dt} attempts \u2014 skipping. Edit helix.config.ts manually.
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumDynamic Requiredist/templates/project/_helix/hooks/helix-activate.cjs
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/cli.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @trayai/helix-cli@0.106.0.
See all versions of @trayai/helix-cli for other recorded verdicts.
- Review the evidence and your use of @trayai/helix-cli@0.106.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.