registry / @velaro/cli / 1.4.76
@velaro/cli@1.4.76
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 27d ago · by lpm-firewall-aiInspected source shows the install hook limited to a best-effort banner, a package-aligned screenshot workflow, and a user-invoked self-update. The flagged process and network behaviors are consistent with those features, with no concrete attack behavior established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation triggers the postinstall banner; screenshot capture and updates require invoking their CLI commands.
Impact
No unauthorized credential disclosure, unrelated network destination, or install-time system mutation was established.
Mechanism
The screenshot helper calls a fixed local Python polishing script and uploads the resulting image to the Velaro KB API; the update command checks npm and installs this CLI package.
AI rationale
Inspected source shows the install hook limited to a best-effort banner, a package-aligned screenshot workflow, and a user-invoked self-update. The flagged process and network behaviors are consistent with those features, with no concrete attack behavior established.
Evidence
package.jsonscripts/postinstall.jslib/kb-screenshot.jslib/commands/update.js
Network endpoints2
registry.npmjs.orghelp.velaro.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines a postinstall hook that invokes a package-local script.
- The postinstall script attempts to print a first-run banner and catches errors.
- The screenshot helper passes a fixed package-local Python script and screenshot paths to execFile without a shell.
- The update command checks the npm registry for this package and installs its latest release only when the command is invoked.
Evidence against
- No inspected source showed credential harvesting or sending to an unrelated recipient.
- The flagged child process supports screenshot polishing, and its upload targets the Velaro KB API using a bearer token.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
1 Critical8 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltalib/kb-screenshot.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/kb-screenshot.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @velaro/cli@1.4.76.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.76 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.