registry / @velaro/cli / 1.4.114
@velaro/cli@1.4.114
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe install hook only prints a banner. The startup updater targets this package’s npm release and is disclosed with an opt-out; the flagged screenshot and staff-tool credential flows are tied to explicit commands and Velaro services.
Static reason
One or more suspicious static signals were detected.
Trigger
The postinstall hook prints a banner; the CLI checks for updates on startup; screenshot and update operations run through their named commands.
Impact
The reviewed paths do not show unrelated credential disclosure or harmful automatic account or file actions.
Mechanism
The updater checks the package’s npm registry and may install @velaro/cli@latest. The screenshot command captures a requested staging page and uploads the image to the Velaro admin API.
AI rationale
The install hook only prints a banner. The startup updater targets this package’s npm release and is disclosed with an opt-out; the flagged screenshot and staff-tool credential flows are tied to explicit commands and Velaro services.
Network endpoints6
registry.npmjs.org/@velaro/cli/latesthelp.velaro.comadmin-staging.velaro.commessaging-staging.velaro.comconsole-staging.velaro.comvelaro-eastus-stg-kv.vault.azure.net
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook prints a version banner and has no network request or other install-time action.
- The CLI checks the npm registry at most once per day and caches the result.
- A newer version can trigger a detached install of this same CLI for registry installs; the code provides a VELARO_NO_AUTO_UPDATE opt-out and prints an update notice.
- The screenshot feature requires an explicit article ID, app, and route.
- The screenshot upload sends the selected image with the Velaro bearer token to the configured admin API or help.velaro.com.
Evidence against
- The CLI can automatically install its latest version after a startup check unless VELARO_NO_AUTO_UPDATE or CI is set.
- The screenshot feature can retrieve staging test credentials from Azure Key Vault when credential environment variables are absent.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/deploy-state.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependency
Affected versions and remediation
This report applies to @velaro/cli@1.4.114.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.114 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.