registry / @vibiz/cli / 0.2.1
@vibiz/cli@0.2.1
The Vibiz Stack CLI and MCP server: website, database, sign-in, email and AI for a new business, from your terminal or your AI agent.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential flow is invoked by a user-run command that explicitly sets a Google AI key on the Vibiz service; the default API endpoint is Vibiz’s own host. The startup network request checks package version metadata from npm and does not send local or credential data.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The update check runs at CLI startup; sending a Google AI key requires running the key-setting command and supplying the key.
Impact
No automatic credential exfiltration or other harmful behavior was found in the reviewed paths.
Mechanism
The key-setting command passes the supplied key to the Vibiz API client. The client uses a configured base URL, defaulting to app.vibiz.app. The startup check requests package version metadata from the npm registry.
AI rationale
The flagged credential flow is invoked by a user-run command that explicitly sets a Google AI key on the Vibiz service; the default API endpoint is Vibiz’s own host. The startup network request checks package version metadata from npm and does not send local or credential data.
Evidence
update-check.json
Network endpoints2
app.vibiz.appregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/vibiz.js as the CLI executable and declares no lifecycle scripts.
- A Google AI key is read only when the user runs the key-setting command, from a named environment variable or hidden prompt, then passed to aiKeys.set.
- aiKeys.set sends the key through the Vibiz API client, which uses a Bearer token and a configured API base URL; the CLI defaults to https://app.vibiz.app and allows an explicit URL override.
- The startup update check fetches version metadata from registry.npmjs.org/@vibiz/cli/latest; the request shown does not include package, host, or credential data.
Evidence against
- The package uses network access and environment variables, and the AI-key command sends a user-provided Google key to Vibiz; this behavior is explicit in the command and its purpose.
- The CLI performs an automatic update check on startup, but it contacts the package registry only for version metadata.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
6 flaggeddist/chunk-J4RTAA72.jsView file
48headers,
L49: body: init.form ?? init.raw ?? (init.body !== void 0 ? JSON.stringify(init.body) : void 0)
L50: });
...
L52: async fail(res) {
L53: const json = await res.json().catch(() => null);
L54: const e = json?.error;
...
L613: folder: opts.folder,
L614: private: opts.private ? 1 : void 0
L615: })}`,
...
L1327: const abs = resolve(root);
L1328: const home = homedir();
L1329: if (abs === parse(abs).root || abs === home || home.startsWith(`${abs}${sep}`)) {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/chunk-J4RTAA72.jsView on unpkg · L48dist/vibiz.jsView file
11// packages/cli/src/main.ts
L12: import { spawn } from "node:child_process";
L13: import { chmod, mkdir as mkdir2, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
...
L23: var runtimeEnv = () => globalThis.process?.env ?? {};
L24: var DEFAULT_URL = "https://app.vibiz.app";
L25: var VibizAppError = class extends Error {
...
L162: let diff = 0;
L163: for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
L164: return diff === 0;
...
L201: var query = (q) => {
L202: const p = new URLSearchParams();
L203: for (const [k, v] of Object.entries(q)) if (v !== void 0 && v !== "") p.set(k, String(v));
Critical
Credential Exfiltration
Findings
2 Critical3 High3 Medium5 Low
CriticalCredential Exfiltrationdist/vibiz.js
CriticalTrigger Reachable Dangerous Capabilitydist/vibiz.js
HighCredential Redirect Persistencedist/vibiz.js
HighTrigger Reachable Credential Exfiltrationdist/vibiz.js
HighSemantic Analysis Limiteddist/chunk-J4RTAA72.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowWeak Cryptodist/chunk-J4RTAA72.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @vibiz/cli@0.2.1.
See all versions of @vibiz/cli for other recorded verdicts.
- Review the evidence and your use of @vibiz/cli@0.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.