@yagofontanez/create-seo-site@0.5.0
CLI para gerar projetos Next.js focados em SEO/GEO local a partir de um strategy.json
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI performs disclosed, token-gated runtime telemetry during `init`, including the project name supplied to the command. Because that identifying detail is sent to the publisher’s service, this warrants a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running `init` when `SEO_SITE_TOKEN` is present.
Impact
The project name may identify customer work sent to the package publisher’s service, so this is a privacy risk despite the documented opt-in.
Mechanism
The CLI posts the project name, selected scaffold options, CLI and Node versions, platform, and timestamp; the endpoint can be overridden with `SEO_SITE_API_URL`.
AI rationale
The CLI performs disclosed, token-gated runtime telemetry during `init`, including the project name supplied to the command. Because that identifying detail is sent to the publisher’s service, this warrants a warning rather than a publish block.
Evidence
bin/cli.jsREADME.md
Network endpoints1
btidemhgsmjcnvefzgck.supabase.co/functions/v1/register-scaffold
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The `init` flow calls `registrarScaffold` with the project name and scaffold choices.
- When `SEO_SITE_TOKEN` is set, the CLI sends a POST containing the project name and scaffold metadata to the agency registration endpoint.
- The README discloses that this registration is opt-in and disabled without the token; the project name can still identify customer work.
Evidence against
- The separate `registrar` command requires an explicit invocation and documents that it sends Supabase credentials to register the site in the agency panel.
- The flagged Meta conversion code sends its configured CAPI token and conversion events to Meta’s Graph API.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
3 flaggedtemplates/base-nextjs/src/lib/conversions/meta.tsView file
6L7: const PIXEL_ID = process.env.NEXT_PUBLIC_META_PIXEL_ID;
L8:
...
L34: action_source: "website",
L35: user_data: limpar({
L36: ...userDataDaIdentidade(conversao.identidade),
...
L49: try {
L50: const resposta = await fetch(
L51: `https://graph.facebook.com/${VERSAO_API}/${PIXEL_ID}/events`,
...
L65: if (!resposta.ok) {
L66: console.error("[capi] meta recusou:", resposta.status, await resposta.text());
L67: return "erro";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
templates/base-nextjs/src/lib/conversions/meta.tsView on unpkg · L6bin/cli.jsView file
33const candidates = [
L34: import_node_path.default.resolve(__dirname, "..", ...segments),
L35: import_node_path.default.resolve(__dirname, "..", "..", ...segments),
...
L222:
L223: var import_node_http = __toESM(require("http"));
L224: var import_node_https = __toESM(require("https"));
...
L227: function urlDoRegistro() {
L228: return process.env.SEO_SITE_API_URL ?? REGISTRO_API_URL;
L229: }
...
L241: try {
L242: const pkg2 = JSON.parse(
L243: import_node_fs3.default.readFileSync(packagePath("package.json"), "utf8")
Findings
1 Critical1 High4 Medium6 Low
CriticalCredential Exfiltrationtemplates/base-nextjs/src/lib/conversions/meta.ts
HighSandbox Evasion Gated Capabilitybin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencebin/cli.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @yagofontanez/create-seo-site@0.5.0.
See all versions of @yagofontanez/create-seo-site for other recorded verdicts.
- Review the evidence and your use of @yagofontanez/create-seo-site@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.