@vibeapi/cli@0.0.161
CLI tool for managing AI coding assistants (Claude Code, Codex, OpenClaw, Hermes, AtomCode, Grok Build) with one unified config
AI Security Review
scanned 16h ago · by lpm-firewall-aiThe package performs undisclosed runtime telemetry by default, including command metadata and diagnostic details, which warrants a warning under the telemetry rule. The inspected source shows collection directed to the configured VibeAPI service, not a concrete credential theft or unrelated-host exfiltration attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running a CLI command, except version/help paths that skip telemetry; telemetry can be disabled with the package-prefixed TELEMETRY setting.
Impact
The service receives command-usage and diagnostic information without documented disclosure in the inspected README; error text is masked for secrets and home paths.
Mechanism
The CLI records command names, selected flags, status, errors, and supplied details, then posts events to the configured VibeAPI telemetry endpoint. The request may include the configured VibeAPI API key.
AI rationale
The package performs undisclosed runtime telemetry by default, including command metadata and diagnostic details, which warrants a warning under the telemetry rule. The inspected source shows collection directed to the configured VibeAPI service, not a concrete credential theft or unrelated-host exfiltration attack.
Evidence
dist/lib/telemetry.jsdist/lib/command.js
Network endpoints1
Configured VibeAPI base URL: /api/platform/vibecode/telemetry
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Telemetry is enabled by default and can be disabled with the package-prefixed TELEMETRY environment setting.
- Each ordinary CLI command records its command name and selected flags; events can also include error text and caller-provided details.
- The telemetry sender posts events to the configured VibeAPI base URL and includes the configured API key when present.
Evidence against
- The manifest has no install lifecycle scripts; it exposes a CLI and a library entry point.
- Telemetry records command metadata and masked error text; the inspected code does not show credential or file-content collection.
- Shell-profile and environment writes are implemented as an explicit persistent-environment operation.
Behavioral surface
ChildProcessEnvironmentVarsNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/lib/tools/chatgpt-desktop.jsView file
1import{spawnSync as t}from"child_process";import{logger as n}from"../../utils/logger.js";import{brand as e}from"../brand.js";import{powerShellEnv as r}from"../powershell-env.js";im...
High
Child Process
Package source references child process execution.
dist/lib/tools/chatgpt-desktop.jsView on unpkg · L1dist/lib/tools/tool-installs.jsView file
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
High
1import{spawnSync as t}from"child_process";import{existsSync as n,realpathSync as r,statSync as e}from"fs";import{delimiter as o,dirname as s,isAbsolute as i,join as a}from"path";im...
Findings
1 Critical5 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/lib/tools/desktop-app-installer.js
HighChild Processdist/lib/tools/chatgpt-desktop.js
HighShelldist/lib/tools/tool-installs.js
HighSame File Env Network Executiondist/lib/tools/claude-desktop-cli.js
HighTrigger Reachable Persistencedist/lib/env-cleanup.js
HighRuntime Package Installdist/lib/tools/tool-installs.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/persistent-env.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @vibeapi/cli@0.0.161.
See all versions of @vibeapi/cli for other recorded verdicts.
- Review the evidence and your use of @vibeapi/cli@0.0.161 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.