registry / @wraps.dev/cli / 3.6.0
@wraps.dev/cli@3.6.0
Deploy email, SMS, and CDN infrastructure to your AWS account with one command. Sets up SES with DKIM/SPF/DMARC, event processing, and history automatically.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe static findings reflect expected capabilities of an AWS infrastructure CLI, not a covert payload or install hook. No lifecycle execution, self-dependency chain, or credential exfiltration to an unrelated endpoint was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs CLI commands or deploys the inbound email processor.
Impact
The tool can access and manage the AWS resources and data the user configures it to handle.
Mechanism
User-directed API, telemetry, and AWS infrastructure operations.
AI rationale
The static findings reflect expected capabilities of an AWS infrastructure CLI, not a covert payload or install hook. No lifecycle execution, self-dependency chain, or credential exfiltration to an unrelated endpoint was established.
Evidence
~/.wraps/config.jsonAWS S3 objectsAWS EventBridge
Network endpoints2
api.wraps.devapp.wraps.dev
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The CLI can send telemetry to its configured endpoint during user-invoked commands.
- The bundled inbound processor reads and writes email data within AWS S3 and emits AWS EventBridge events.
Evidence against
- The manifest has no preinstall, install, or postinstall lifecycle hook.
- The default API host is the package's own wraps.dev service, and authentication is activated by an explicit login or token option.
- The flagged Lambda uses AWS SDK clients for its declared inbound-email processing path; no external HTTP exfiltration is present.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Source & flagged code
15 flaggeddist/cli.jsView file
19import { fileURLToPath } from "url";
L20: var getFilename, getDirname, __dirname;
L21: var init_esm_shims = __esm({
...
L31: function isCI() {
L32: if (process.env.CI === "true" || process.env.CI === "1") {
L33: return true;
...
L201: // src/utils/shared/aws-detection.ts
L202: import { execSync } from "child_process";
L203: import { existsSync, readdirSync, readFileSync } from "fs";
...
L267: const sts = new STSClient({ region: "us-east-1" });
L268: const identity = await sts.send(new GetCallerIdentityCommand({}));
L269: return identity.Account || null;
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cli.jsView on unpkg · L1919Trigger-reachable chain: manifest.main -> dist/cli.js
L19: import { fileURLToPath } from "url";
L20: var getFilename, getDirname, __dirname;
L21: var init_esm_shims = __esm({
...
L31: function isCI() {
L32: if (process.env.CI === "true" || process.env.CI === "1") {
L33: return true;
...
L201: // src/utils/shared/aws-detection.ts
L202: import { execSync } from "child_process";
L203: import { existsSync, readdirSync, readFileSync } from "fs";
...
L267: const sts = new STSClient({ region: "us-east-1" });
L268: const identity = await sts.send(new GetCallerIdentityCommand({}));
L269: return identity.Account || null;
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/cli.jsFindings
2 Critical10 High6 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighCredential Exfiltrationdist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighCloud Metadata Accessdist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/lambda/inbound-processor/index.js
Affected versions and remediation
This report applies to @wraps.dev/cli@3.6.0.
See all versions of @wraps.dev/cli for other recorded verdicts.
- Review the evidence and your use of @wraps.dev/cli@3.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.