@vibekiln/cutline-mcp-cli-staging@0.8.1
CLI and MCP servers for Cutline, including SlopBurn: a product quality engineering roguelike RPG for vibecoding workflows.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package’s explicit `init` flow sends authenticated installation and usage telemetry to the publisher’s service, including stable project-derived identifiers, with no disclosure or opt-out found in the inspected materials. This is a warning-level telemetry concern; no malicious credential redirection or install-time behavior was confirmed.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `cutline-mcp init` while authenticated.
Impact
Cutline can associate initialization and workspace activity with the authenticated account and a stable workspace identifier.
Mechanism
The command posts a bearer token, stable hashes derived from the project path, and setup event properties to Cutline’s registration and event endpoints.
AI rationale
The package’s explicit `init` flow sends authenticated installation and usage telemetry to the publisher’s service, including stable project-derived identifiers, with no disclosure or opt-out found in the inspected materials. This is a warning-level telemetry concern; no malicious credential redirection or install-time behavior was confirmed.
Evidence
dist/commands/init.jsdist/utils/agent-funnel.jsdist/utils/config.js~/.cutline-mcp/config.json.cutline/config.json.cursor/rules/rgr-workflow.mdc.cursor/rules/ambient-constraints.mdc
Network endpoints4
thecutline.ai/api/agent/registerthecutline.ai/api/agent/eventcutline-staging.web.app/api/agent/registercutline-staging.web.app/api/agent/event
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit `init` command sends an authenticated install registration and follow-up usage events without a documented telemetry opt-out found in the inspected package materials.
- Registration derives stable installation and workspace identifiers from the project path and sends them to the Cutline service.
- The event payload records command and setup details, including tier and generated rule count.
Evidence against
- Telemetry is triggered by the user running `init`, rather than by an install hook or package import.
- The registration and event requests target the package’s own Cutline service; the project path is hashed before sending.
- The manifest’s only lifecycle script is `prepublishOnly`, which runs a build rather than install-time code.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetry
Source & flagged code
8 flaggeddist/commands/serve.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @vibekiln/cutline-mcp-cli-staging@0.5.4
matchedIdentity = npm:[redacted]:0.5.4
similarity = 0.931
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/commands/serve.jsView on unpkg1import { execFileSync, spawn } from 'node:child_process';
L2: import { createServer } from 'node:http';
High
Child Process
Package source references child process execution.
dist/commands/serve.jsView on unpkg · L11Cross-file remote execution chain: dist/commands/serve.js spawns dist/servers/cutline-server.js; helper contains network access plus dynamic code execution.
L1: import { execFileSync, spawn } from 'node:child_process';
L2: import { createServer } from 'node:http';
L3: import { resolve, dirname } from 'node:path';
...
L5: import { existsSync } from 'node:fs';
L6: const __dirname = dirname(fileURLToPath(import.meta.url));
L7: export const SERVER_MAP = {
...
L51: try {
L52: const text = Buffer.concat(chunks).toString('utf8');
L53: resolveBody(text ? JSON.parse(text) : {});
...
L67: });
L68: res.end(payload);
L69: }
Findings
1 Critical6 High2 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/commands/serve.js
HighChild Processdist/commands/serve.js
HighShelldist/servers/slopburn-server.js
HighCredential Exfiltrationdist/servers/chunk-NQOTQA5Z.js
HighCredential Redirect Persistencedist/commands/init.js
HighCross File Remote Execution Contextdist/commands/serve.js
HighSemantic Analysis Limiteddist/servers/chunk-NQOTQA5Z.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/servers/slopburn-server.js
Low
Affected versions and remediation
This report applies to @vibekiln/cutline-mcp-cli-staging@0.8.1.
See all versions of @vibekiln/cutline-mcp-cli-staging for other recorded verdicts.
- Review the evidence and your use of @vibekiln/cutline-mcp-cli-staging@0.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.