@vibeapi/cli@0.0.154
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package sends undisclosed runtime telemetry by default, which warrants a warning under the telemetry rules. The inspected payload is limited to command diagnostics and does not establish credential or file exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running an ordinary CLI command other than help or version.
Impact
The service receives command usage and diagnostic metadata. The inspected events do not include credentials or file contents.
Mechanism
The CLI collects command diagnostics and sends them to the configured gateway; telemetry can be disabled with TELEMETRY=0, false, or off.
AI rationale
The package sends undisclosed runtime telemetry by default, which warrants a warning under the telemetry rules. The inspected payload is limited to command diagnostics and does not establish credential or file exfiltration.
Evidence
dist/lib/telemetry.jsdist/lib/command.js
Network endpoints1
<configured gateway host>/api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Runtime telemetry is enabled by default and can be disabled with TELEMETRY=0, false, or off.
- Telemetry events contain command and step names, status, duration, filtered flag names, and masked error text.
- The CLI posts telemetry to /api/platform/vibecode/telemetry on the configured gateway.
- Ordinary CLI commands start telemetry collection and flush it before exiting.
Evidence against
- The package has no lifecycle scripts, and its import entry only re-exports modules.
- The inspected telemetry payload contains no credential or file-content collection.
- Persistent environment writes and tool installation are exposed as command-driven features.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/lib/tools/desktop-app-installer.js
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vibeapi/cli@0.0.154.
See all versions of @vibeapi/cli for other recorded verdicts.
- Review the evidence and your use of @vibeapi/cli@0.0.154 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.