registry / @velaro/cli / 1.4.81
@velaro/cli@1.4.81
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe lifecycle hook only attempts a first-run banner, while the flagged network and process behavior belongs to user-invoked CLI functions. Inspected source provides no concrete attack behavior, so the package is clean.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the screenshot-related functionality or the update command.
Impact
No confirmed attack surface was established; observed behavior supports the CLI's screenshot and update functions.
Mechanism
Screenshot capture uses configured Velaro staging URLs and upload sends the image with a Velaro token to the Velaro admin API. Update checks npm and performs its installation step from the invoked command handler.
AI rationale
The lifecycle hook only attempts a first-run banner, while the flagged network and process behavior belongs to user-invoked CLI functions. Inspected source provides no concrete attack behavior, so the package is clean.
Evidence
package.jsonscripts/postinstall.jslib/kb-screenshot.jslib/commands/update.js
Network endpoints2
registry.npmjs.org/@velaro/cli/latesthelp.velaro.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and a postinstall script; the script only attempts to print a first-run banner.
- Screenshot capture is entered through an explicit function call and selects from Velaro staging app URLs.
- Screenshot upload targets the configured Velaro admin API or help.velaro.com and sends the Velaro token to its upload-image endpoint.
- The update command checks the npm registry when invoked; its update install behavior is user-command initiated.
Evidence against
- Inspected source shows no automatic postinstall payload download, broad consumer-project mutation, or command-output exfiltration.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/kb-screenshot.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependency
Affected versions and remediation
This report applies to @velaro/cli@1.4.81.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.81 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.