registry / @velaro/cli / 1.4.11
@velaro/cli@1.4.11
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe flagged network, credential, subprocess, and AI-configuration behaviors are scoped to named CLI features and package-aligned Velaro services. The install hook is a local banner invocation and does not establish an install-time malicious chain.
Static reason
One or more suspicious static signals were detected.
Trigger
Installation prints a first-run banner; update, screenshot, and MCP setup require named user commands.
Impact
No unconsented credential exfiltration, remote payload execution, or broad AI-agent control-surface mutation was found.
Mechanism
User-invoked Velaro administration, update, screenshot, and MCP setup features.
AI rationale
The flagged network, credential, subprocess, and AI-configuration behaviors are scoped to named CLI features and package-aligned Velaro services. The install hook is a local banner invocation and does not establish an install-time malicious chain.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package has a postinstall hook, but its source only invokes a local first-run banner.
- The explicit update command fetches the npm registry and runs a global self-update command.
- The explicit MCP-key install command can add a Velaro server entry to the user's Claude configuration.
- The screenshot command can retrieve operator credentials and upload a screenshot when that feature is invoked.
Evidence against
- The install hook contains no network access, subprocess launch, credential collection, or AI-agent configuration write.
- The update subprocess is reachable only through the named update CLI command, not during installation.
- The MCP configuration write is limited to an explicitly named user command and a Velaro-owned server entry.
- API requests use the logged-in Velaro token against configured Velaro service endpoints; no unrelated exfiltration endpoint was found.
- No runtime dependency on another release of this package, obfuscated payload, or reviewer-directed manipulation was found.
Behavioral surface
ChildProcess
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkglib/kb-screenshot.jsView file
19import { fileURLToPath } from 'url';
L20: import { execFile } from 'child_process';
L21: import { promisify } from 'util';
High
Child Process
Package source references child process execution.
lib/kb-screenshot.jsView on unpkg · L19Findings
8 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/kb-screenshot.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @velaro/cli@1.4.11.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.