registry / @velaro/cli / 1.4.125
@velaro/cli@1.4.125
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe install-time hook only displays a banner, while network access and credential use are tied to Velaro CLI update and administration features. The default background self-update is a notable behavior, but it targets the package's npm release and is disclosed with an opt-out.
Static reason
One or more suspicious static signals were detected.
Trigger
Installation prints the banner. Running the CLI starts a periodic update check; KB screenshot login, upload, and article changes require invoking that command.
Impact
The CLI may update itself in the background and the requested screenshot command may upload an image and modify a KB article.
Mechanism
The update checker queries registry.npmjs.org and may launch npm to update @velaro/cli. The screenshot feature uses configured credentials with Velaro staging apps and the configured Velaro admin API.
AI rationale
The install-time hook only displays a banner, while network access and credential use are tied to Velaro CLI update and administration features. The default background self-update is a notable behavior, but it targets the package's npm release and is disclosed with an opt-out.
Network endpoints6
registry.npmjs.orgadmin-staging.velaro.commessaging-staging.velaro.comconsole-staging.velaro.com${vaultName}.vault.azure.nethelp.velaro.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook imports a banner helper and writes banner text to the terminal; it does not make a network request.
- The update checker queries the npm registry once per day and caches the latest version.
- The background update is limited to registry installs, skips CI, has an explicit VELARO_NO_AUTO_UPDATE opt-out, and announces the update.
- The separate update command is user-invoked and installs this package from the npm registry.
- Screenshot capture and credential use are part of an explicit KB article command, and uploads go to the configured Velaro admin API.
Evidence against
- A package command automatically checks for updates and may install the latest CLI version in the background without a per-update prompt.
- Screenshot capture can obtain credentials from environment variables or Azure Key Vault and use them to log into Velaro staging apps.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/deploy-state.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirelib/track.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @velaro/cli@1.4.125.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.125 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.