registry / @velaro/cli / 1.4.92
@velaro/cli@1.4.92
Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe postinstall hook only prints a banner, and the source-inspected screenshot behavior is an explicit Velaro KB workflow. The automatic updater is package-aligned and opt-out; the inspected code does not establish a concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
The screenshot workflow requires an explicit CLI command; the updater checks after CLI startup and updates registry installs when a newer version is available and opt-out settings are absent.
Impact
The inspected behavior does not establish credential exfiltration, command-output disclosure, or another concrete attack surface.
Mechanism
The screenshot command captures a selected Velaro application page and uploads it to the Velaro KB API. The updater installs this CLI from npm.
AI rationale
The postinstall hook only prints a banner, and the source-inspected screenshot behavior is an explicit Velaro KB workflow. The automatic updater is package-aligned and opt-out; the inspected code does not establish a concrete attack.
Evidence
package.jsonscripts/postinstall.jsbin/velaro.jslib/commands/article.jslib/kb-screenshot.jslib/commands/update.jslib/update-check.js.lpm-dependency-evidence-42490232-1bda-423a-a508-bd4ac3e53ef4/0/package.json
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI and runs a postinstall script.
- The CLI entrypoint starts the update check before parsing commands.
- The inspected xlsx manifest lists development scripts and no install lifecycle script.
- The screenshot helper logs into one of three selected Velaro applications.
- The update command fetches the latest version and installs this CLI when explicitly run.
- The screenshot helper uploads the image to the Velaro KB API using its bearer token.
- The postinstall script prints a version banner.
- The screenshot command requires an article ID, app, and route from its caller.
Evidence against
- The inspected install hook only prints a banner; the screenshot flow is called through an explicit CLI command and targets Velaro staging and KB services.
- The automatic updater installs this CLI from npm and has an environment opt-out; the inspected code does not show it sending command output or unrelated credentials.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz
Medium
Remote Tarball Dependency
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkglib/kb-screenshot.jsView file
Findings
8 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processlib/kb-screenshot.js
HighShell
HighSame File Env Network Executionlib/kb-screenshot.js
HighCommand Output Exfiltrationlib/commands/update.js
HighTrigger Reachable Command Output Exfiltrationlib/commands/update.js
HighRuntime Package Installlib/commands/update.js
HighSemantic Analysis Limitedlib/kb-screenshot.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependency
Affected versions and remediation
This report applies to @velaro/cli@1.4.92.
See all versions of @velaro/cli for other recorded verdicts.
- Review the evidence and your use of @velaro/cli@1.4.92 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.