@vibeapi/cli@0.0.150
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe CLI sends default-on runtime usage telemetry, including command names and flags, to the vendor gateway, with an environment-variable opt-out. The collected fields appear limited, making this a warning-level privacy concern rather than evidence of credential theft.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI; telemetry is enabled unless VIBECLI_TELEMETRY is set to 0, false, or off.
Impact
Unannounced usage reporting creates a privacy risk; the inspected payload does not show credential or file-content collection.
Mechanism
The CLI queues command and flag details, then posts event batches with an install ID and runtime metadata to the configured gateway’s telemetry route.
AI rationale
The CLI sends default-on runtime usage telemetry, including command names and flags, to the vendor gateway, with an environment-variable opt-out. The collected fields appear limited, making this a warning-level privacy concern rather than evidence of credential theft.
Evidence
dist/lib/telemetry.jsdist/lib/command.jsdist/brand.json
Network endpoints1
www.vibeapi.cn/api/platform/vibecode/telemetry (default gateway; base URL is configurable)
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI sends command names and non-key flag arguments in a telemetry event when a command runs.
- Telemetry is enabled by default; the VIBECLI_TELEMETRY environment variable can disable it.
- Events are posted to /api/platform/vibecode/telemetry with install ID and runtime metadata.
- The default telemetry host is the package vendor’s VibeAPI gateway.
Evidence against
- The telemetry payload is limited to runtime metadata and command flags; key-like flag tokens are filtered.
- The CLI exposes an environment-variable opt-out for telemetry.
- The package declares no lifecycle scripts, so this telemetry is runtime behavior rather than install-time collection.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/lib/tools/claude-desktop.js
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vibeapi/cli@0.0.150.
See all versions of @vibeapi/cli for other recorded verdicts.
- Review the evidence and your use of @vibeapi/cli@0.0.150 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.