registry / @trycodev/cli / 0.7.0
@trycodev/cli@0.7.0
Secure CoDev cloud coding-agent authentication CLI
AI Security Review
scanned 7d ago · by lpm-firewall-aiSource inspection found no install-time execution or hidden credential transfer. Authentication, project sharing, agent setup, and coordination are command-driven product behavior directed at the configured CoDev service.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs an authentication, setup, share, or coordination command.
Impact
No confirmed malicious effect was established; the inspected transfers and configuration changes support the CLI's stated collaboration features.
Mechanism
Authentication sends provider credentials through authenticated CoDev API calls; setup writes CoDev agent configuration, and sharing uploads selected project files.
AI rationale
Source inspection found no install-time execution or hidden credential transfer. Authentication, project sharing, agent setup, and coordination are command-driven product behavior directed at the configured CoDev service.
Evidence
src/client.mjssrc/setup-codex.mjssrc/setup-hooks.mjssrc/share.mjssrc/share-files.mjs
Network endpoints1
www.trycodev.com
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI entry point and lists only test and typecheck scripts; it defines no install lifecycle script.
- Provider credentials are collected by explicit auth commands and sent to the configured CoDev API using the saved CoDev login. The default API host is www.trycodev.com.
- The MCP helper sends the saved CoDev login to that configured API to obtain a connector token, then prints the token for the agent connection.
- The explicit share command uploads selected project files to CoDev; the file selection code filters out common credential files.
- Agent connector and hook configuration is written by the explicit setup command, which connects an account before processing installed agents.
- Coordination runs through the configured agent hook and handles repository changes and work in progress as part of the collaboration feature.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedsrc/coordinate-git.mjsView file
1import { execFile } from "node:child_process";
L2: import { createHash } from "node:crypto";
High
Child Process
Package source references child process execution.
src/coordinate-git.mjsView on unpkg · L1src/share-files.mjsView file
1import { execFile } from "node:child_process";
L2: import { createHash } from "node:crypto";
...
L46: { maxBuffer: 64 << 20, encoding: "buffer" },
L47: (error, stdout) => resolve(error ? null : stdout),
L48: );
...
L57: if (!out) return null;
L58: return [...new Set(out.toString("utf8").split("\0").filter(Boolean))];
L59: }
Low
Weak Crypto
Package source references weak cryptographic algorithms.
src/share-files.mjsView on unpkg · L1src/client.mjsView file
Findings
1 Critical3 High3 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationsrc/client.mjs
HighChild Processsrc/coordinate-git.mjs
HighSame File Env Network Executionsrc/client.mjs
HighPrevious Version Dangerous Deltasrc/coordinate.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptosrc/share-files.mjs
LowFilesystem
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @trycodev/cli@0.7.0.
See all versions of @trycodev/cli for other recorded verdicts.
- Review the evidence and your use of @trycodev/cli@0.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.