registry / @velaro/cli / 1.4.122
@velaro/cli@1.4.122
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe flagged execution and network behaviors are tied to the CLI’s update and administration features. The startup self-update is disclosed in code, uses npm for this package, and can be disabled; no credential exfiltration or unrelated automatic action was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
Install prints the banner; CLI startup checks for updates; tracking follows successful commands; screenshot and update workflows require command invocation.
Impact
No malicious behavior identified. Expected effects include a banner, cached update metadata, a possible CLI self-update, and changes to the article selected by the user.
Mechanism
The update check contacts npm and may install a newer release of this CLI. Tracking sends the action and version to the configured API. The screenshot workflow uses staging credentials and updates the selected knowledge-base article.
AI rationale
The flagged execution and network behaviors are tied to the CLI’s update and administration features. The startup self-update is disclosed in code, uses npm for this package, and can be disabled; no credential exfiltration or unrelated automatic action was identified.
Evidence
~/.velaro/config.json/dev/tty/tmp/kb-screenshot-<articleId>-<timestamp>.png
Network endpoints8
registry.npmjs.org/@velaro/cli/latestadmin-staging.velaro.commessaging-staging.velaro.comconsole-staging.velaro.comhelp.velaro.com<vaultName>.vault.azure.netgraph.microsoft.com/v1.0/me<configured Velaro API base>
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook imports the banner text and prints it; it does not install or contact a service.
- The `velaro update` command checks the npm registry and installs the CLI only when the user invokes that command.
- Usage tracking sends only the action and CLI version to the configured Velaro API, and requires an existing Velaro token and API base.
- The startup update check queries npm at most once per day and caches the result in the CLI config.
- When a newer version is found, registry installs automatically update the CLI from npm; the code identifies this behavior and provides `VELARO_NO_AUTO_UPDATE=1` to disable it.
- The screenshot feature requires an explicit article ID, app, and route, and then uploads the result and updates that article.
Evidence against
- The CLI performs a background self-update by default when it detects a newer version, unless disabled or running in CI.
- The screenshot command can retrieve credentials from Azure Key Vault when environment credentials are absent, but this occurs within the explicitly invoked screenshot workflow.
Behavioral surface
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/deploy-state.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirelib/track.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @velaro/cli@1.4.122.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.122 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.