registry / @wayai/cli / 0.3.154
@wayai/cli@0.3.154
WayAI CLI — sync hub configuration between local files and the platform
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the flagged harness paths are used to identify installed skill files. The inspected background package-manager call checks and caches the CLI version; actual CLI updates use the explicit update command.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the CLI; automatic update nudges require an interactive terminal and can be disabled.
Impact
No confirmed attack surface was established from the inspected code.
Mechanism
A detached process may check the package version and cache the result. The CLI directs users to an explicit command to install an update.
AI rationale
The package has no install lifecycle hook, and the flagged harness paths are used to identify installed skill files. The inspected background package-manager call checks and caches the CLI version; actual CLI updates use the explicit update command.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entrypoint and has no install lifecycle hook.
- The flagged agent paths identify WayAI skill files under common harness directories; nearby code reads those files to check installed versions.
- Version checks run only for an interactive terminal, can be disabled by environment settings, and display update instructions.
- The background package-manager call checks the version of this package and stores the result in a cache.
- Installing the CLI update is performed by the explicit update command.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
14646});
L14647: import { execFileSync } from "child_process";
L14648: import * as fs2 from "fs";
High
51while (cursor < text.length) {
L52: while (cursor < text.length && !isBase64UrlChar(text[cursor])) cursor++;
L53: const headerStart = cursor;
...
L236: "use strict";
L237: CREDENTIAL_KEY_RE = /token|secret|credential|password|passwd|api[_-]?key|authorization|private[_-]?key|session[_-]?id|cookie|jwt/i;
L238: NUMERIC_CREDENTIAL_KEY_RE = /(?:password|passwd|pin|token|secret|credential|api[_-]?key|authorization|private[_-]?key|session[_-]?id|cookie|jwt)$/i;
...
L249: [/\bway_[A-Za-z0-9_-]{8,}/g, "way_[REDACTED]"],
L250: // wst_ single-use WebSocket tickets (same opaque base64url format).
L251: [/\bwst_[A-Za-z0-9_-]{8,}/g, "wst_[REDACTED]"],
...
L366: try {
L367: const __dirname2 = dirname(fileURLToPath(import.meta.url));
L368: const pkg2 = JSON.parse(readFileSync(join(__dirname2, "..", "
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/index.jsView on unpkg · L5116028package = @wayai/cli; repositoryIdentity = platform; dependency = @napi-rs/keyring
L16028: try {
L16029: const mod = await import("@napi-rs/keyring");
L16030: const Entry = mod.Entry;
Findings
5 High3 Medium4 Low
HighChild Processdist/index.js
HighShell
HighSandbox Evasion Gated Capabilitydist/index.js
HighCopied Package Dependency Bridgedist/index.js
HighRuntime Package Installdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @wayai/cli@0.3.154.
See all versions of @wayai/cli for other recorded verdicts.
- Review the evidence and your use of @wayai/cli@0.3.154 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.