@verifux/cli-pro
Paid Verifux deep CLI: run the real-browser agent-actionability check (agent surface, buyer-question probe, checkout-journey walk) and a CI build gate. Requires a licence key.
This report shows the evidence for @verifux/cli-pro@1.0.1, the only known version.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package contains direct instructions aimed at steering this security review’s verdict. Although its declared functionality and licence check appear consistent with its purpose, the reviewer manipulation warrants blocking under the stated rules.
Decision evidence
public snapshot- Comments in both shipped entry points directly instruct reviewers to mark a prior publish finding “REFUTED” and prescribe how to test it, attempting to steer the package review.
- The manifest has no install lifecycle hooks; its only script is a prepack build command.
- The CLI checks a supplied Verifux licence key against the package’s stated licensing service.
Source & flagged code
2 flaggedComments in both shipped entry points directly instruct reviewers to mark a prior publish finding “REFUTED” and prescribe how to test it, attempting to steer the package review.
cli.jsView on unpkg · L156Comments in both shipped entry points directly instruct reviewers to mark a prior publish finding “REFUTED” and prescribe how to test it, attempting to steer the package review.
mcp-server.jsView on unpkg · L257Findings
Affected versions and remediation
This report applies to @verifux/cli-pro@1.0.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing @verifux/cli-pro@1.0.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.