registry / @velaro/cli / 1.4.111
@velaro/cli@1.4.111
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe screenshot feature has a credential exposure risk: its caller-supplied route can point outside the intended staging app, and the flow fills loaded credentials without checking the destination origin. The behavior requires an explicit command and route, so the source does not establish an automatic attack; warn rather than block.
Static reason
One or more suspicious static signals were detected.
Trigger
An explicit article screenshot command using an absolute external URL for --route.
Impact
A route that points to an attacker-controlled login page could expose the loaded email and password.
Mechanism
The command loads credentials from the environment or Azure Key Vault, constructs a target URL from --route, and fills matching login fields without validating the target origin.
AI rationale
The screenshot feature has a credential exposure risk: its caller-supplied route can point outside the intended staging app, and the flow fills loaded credentials without checking the destination origin. The behavior requires an explicit command and route, so the source does not establish an automatic attack; warn rather than block.
Evidence
lib/commands/article.jslib/kb-screenshot.jslib/update-check.js~/.velaro/config.jsontmpdir()/kb-screenshot-<articleId>-<timestamp>.png
Network endpoints7
admin-staging.velaro.commessaging-staging.velaro.comconsole-staging.velaro.comlogin.velaro.comvelaro-eastus-stg-kv.vault.azure.netregistry.npmjs.org/@velaro/cli/latestcaller-supplied --route URL
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The article screenshot command accepts a required route supplied by the caller.
- The screenshot flow obtains email and password values from environment variables or Azure Key Vault.
- It fills those values into login fields, then navigates to a URL constructed from the supplied route without checking that the destination shares the staging app's origin.
- The CLI also checks the package's npm registry and can install its latest version in the background by default.
Evidence against
- The credentialed browser flow runs only when the user invokes the article screenshot command.
- The postinstall hook prints a banner and does not contact a network host.
- The update check queries the package's own npm registry and can be disabled with VELARO_NO_AUTO_UPDATE=1.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/deploy-state.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependency
Affected versions and remediation
This report applies to @velaro/cli@1.4.111.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.111 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.