@vibeapi/api-helper
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
This report shows the evidence for @vibeapi/api-helper@0.0.167. 0 of 81 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 2h ago · by lpm-firewall-aiThe CLI sends runtime usage telemetry by default to its own gateway, and the inspected README does not disclose that collection. This warrants a warning; the source shows an opt-out and no evidence of credential theft or unrelated data collection.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the CLI and performing commands that generate telemetry events.
Impact
The gateway receives command usage and event metadata; no credential exfiltration or unrelated collector was identified.
Mechanism
The CLI batches event metadata and posts it to the configured gateway’s telemetry endpoint. TELEMETRY=0, false, or off disables telemetry.
AI rationale
The CLI sends runtime usage telemetry by default to its own gateway, and the inspected README does not disclose that collection. This warrants a warning; the source shows an opt-out and no evidence of credential theft or unrelated data collection.
Evidence
dist/lib/telemetry.jsdist/lib/command.jsdist/brand.json
Network endpoints6
www.vibeapi.cn/api/platform/vibecode/telemetrywww.vibeapi.si/api/platform/vibecode/telemetryhk.vibeapi.cn/api/platform/vibecode/telemetryus13-www.vibeapi.cn/api/platform/vibecode/telemetrycf.vibeapi.cn/api/platform/vibecode/telemetrytoken.nfeyre.top/api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI queues telemetry events containing timestamps, session IDs, command names, steps, statuses, durations, and optional errors or details.
- Telemetry is enabled by default and can be disabled with TELEMETRY=0, false, or off.
- Telemetry is posted to the configured gateway’s telemetry endpoint; the package’s built-in gateways are VibeAPI hosts.
- The CLI entry module exports library features without executing the CLI command.
Evidence against
- Telemetry error text is masked for common secrets and local home paths before being recorded.
- The manifest declares no lifecycle scripts.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
5 High4 Medium4 Low
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @vibeapi/api-helper@0.0.167.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @vibeapi/api-helper@0.0.167 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.