registry / @velaro/cli / 1.4.113
@velaro/cli@1.4.113
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe install hook only displays a banner, and the flagged credential and command-execution paths are tied to user-invoked CLI features. The default background update check is disclosed, targets this package's npm release, and has opt-out controls, so it does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
The postinstall banner runs at install; the update check runs when the CLI starts; screenshot capture and other service actions require explicit commands.
Impact
The update check may replace the installed CLI with its latest npm release. The reviewed credential flow supports the requested Velaro screenshot and article update.
Mechanism
The update check reads npm version metadata and may install a newer release of this package. Screenshot capture reads configured credentials and sends them to the configured Velaro admin API.
AI rationale
The install hook only displays a banner, and the flagged credential and command-execution paths are tied to user-invoked CLI features. The default background update check is disclosed, targets this package's npm release, and has opt-out controls, so it does not establish malicious behavior.
Evidence
~/.velaro/config.jsonos.tmpdir()/kb-screenshot-<articleId>-<timestamp>.png
Network endpoints6
registry.npmjs.org/@velaro/cli/latestadmin-staging.velaro.commessaging-staging.velaro.comconsole-staging.velaro.comhelp.velaro.comapi.github.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook only prints a version banner to the terminal or stderr.
- The daily update check fetches version metadata from the package's own npm registry endpoint.
- Automatic updates install @velaro/cli from npm and can be disabled with VELARO_NO_AUTO_UPDATE=1 or CI.
- Screenshot capture requires explicit app, route, and article arguments; its upload uses the configured Velaro admin API.
Evidence against
- The CLI can start a background self-update by default after a command when a newer version is available.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/deploy-state.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependency
Affected versions and remediation
This report applies to @velaro/cli@1.4.113.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.113 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.