registry / @vibiz/cli / 0.2.0
@vibiz/cli@0.2.0
The Vibiz Stack CLI and MCP server: website, database, sign-in, email and AI for a new business, from your terminal or your AI agent.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential flow is user-triggered by `vibiz ai keys set` and targets the Vibiz API for the documented own-provider-key feature. The CLI has no install lifecycle scripts, and review found no automatic credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs `vibiz ai keys set google` or initiates `vibiz login`.
Impact
The configured Vibiz service receives the submitted provider key for the requested feature; no unrelated credential collection or destination was found.
Mechanism
The CLI sends the Google key to the configured Vibiz API for the requested AI-key setup. Login contacts the selected API URL; its initial request includes hostname, OS, and CLI version.
AI rationale
The flagged credential flow is user-triggered by `vibiz ai keys set` and targets the Vibiz API for the documented own-provider-key feature. The CLI has no install lifecycle scripts, and review found no automatic credential exfiltration.
Network endpoints1
app.vibiz.app
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI as its bin entry and declares no lifecycle scripts.
- Google AI credentials are read only in the `ai keys set` command, from named environment variables or a hidden prompt.
- The SDK sends a key only when that command calls the AI-key setter, using a PUT request to the configured Vibiz API.
- Login uses the explicit `--api` value, `VIBIZ_API_URL`, or the package's default `https://app.vibiz.app` endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
6 flaggeddist/chunk-GSHNECVT.jsView file
37headers,
L38: body: init.form ?? init.raw ?? (init.body !== void 0 ? JSON.stringify(init.body) : void 0)
L39: });
...
L41: async fail(res) {
L42: const json = await res.json().catch(() => null);
L43: const e = json?.error;
...
L602: folder: opts.folder,
L603: private: opts.private ? 1 : void 0
L604: })}`,
...
L1308: const abs = resolve(root);
L1309: const home = homedir();
L1310: if (abs === parse(abs).root || abs === home || home.startsWith(`${abs}${sep}`)) {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/chunk-GSHNECVT.jsView on unpkg · L37dist/vibiz.jsView file
11// packages/cli/src/main.ts
L12: import { spawn } from "node:child_process";
L13: import { chmod, mkdir, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
...
L22: var runtimeEnv = () => globalThis.process?.env ?? {};
L23: var DEFAULT_URL = "https://app.vibiz.app";
L24: var VibizAppError = class extends Error {
...
L161: let diff = 0;
L162: for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
L163: return diff === 0;
...
L200: var query = (q) => {
L201: const p = new URLSearchParams();
L202: for (const [k, v] of Object.entries(q)) if (v !== void 0 && v !== "") p.set(k, String(v));
Critical
Credential Exfiltration
Findings
2 Critical3 High3 Medium5 Low
CriticalCredential Exfiltrationdist/vibiz.js
CriticalTrigger Reachable Dangerous Capabilitydist/vibiz.js
HighCredential Redirect Persistencedist/vibiz.js
HighTrigger Reachable Credential Exfiltrationdist/vibiz.js
HighSemantic Analysis Limiteddist/chunk-GSHNECVT.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowWeak Cryptodist/chunk-GSHNECVT.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @vibiz/cli@0.2.0.
See all versions of @vibiz/cli for other recorded verdicts.
- Review the evidence and your use of @vibiz/cli@0.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.