registry / @zapier/zapier-sdk / 0.114.5
@zapier/zapier-sdk@0.114.5
Complete Zapier SDK - combines all Zapier SDK packages
AI Security Review
scanned 19d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or concrete attack behavior. The scanner's command and network signals resolve to a URL-opening helper and package-aligned SDK telemetry.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Telemetry runs when the SDK emits events; browser opening occurs when the approval flow requests a URL to be opened.
Impact
The reviewed code does not establish credential exfiltration or command-output disclosure.
Mechanism
Telemetry uses the Zapier tracking route by default and sends event data through an HTTP transport. The process helper accepts only HTTP or HTTPS URLs and uses fixed platform browser commands.
AI rationale
Source inspection found no install lifecycle hook or concrete attack behavior. The scanner's command and network signals resolve to a URL-opening helper and package-aligned SDK telemetry.
Evidence
package.jsondist/chunk-GWDDPYFO.mjsdist/chunk-2HPOD34J.cjsdist/beta.d.tsdist/beta.d.mtsdist/experimental.d.tsdist/experimental.d.mts
Network endpoints1
zapier.com/api/v4/tracking/event/
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points to the SDK runtime entrypoints and lists build, development, typecheck, and test scripts; it has no install lifecycle script.
- The default telemetry destination is the Zapier tracking route, and the HTTP transport sends event data there; callers can configure the transport.
- Runtime event fields include account context and method metadata such as argument count, not command output.
- The child process code opens HTTP or HTTPS URLs using fixed platform commands and ignores subprocess output.
- The flagged beta and experimental files are TypeScript declarations exposing the SDK factory, not executable behavior.
Evidence against
- The package does send runtime telemetry by default, but the inspected destination is package-aligned and the reviewed payload construction does not include command output.
- Dynamic child-process loading is present, but the inspected use is limited to opening a browser URL.
Behavioral surface
DynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggeddist/chunk-GWDDPYFO.mjsView file
11// src/constants.ts
L12: var ZAPIER_BASE_URL = globalThis.process?.env?.ZAPIER_BASE_URL || "https://zapier.com";
L13: function getZapierSdkService() {
...
L69: function getZapierDefaultApprovalMode() {
L70: const isInteractive = !!globalThis.process?.stdin?.isTTY && !!globalThis.process?.stdout?.isTTY;
L71: return isInteractive ? "poll" : "throw";
...
L559: }
L560: const base64UrlPattern = /^[A-Za-z0-9_-]+$/;
L561: return parts.every((part) => part.length > 0 && base64UrlPattern.test(part));
...
L761: headers: censorHeaders(options2?.headers),
L762: body: options2?.body && typeof options2.body === "string" ? (() => {
L763: try {
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/chunk-GWDDPYFO.mjsView on unpkg · L118081patternName = generic_password
severity = medium
line = 8081
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/chunk-GWDDPYFO.mjsView on unpkg · L8081696if (!utilPromise) {
L697: utilPromise = import('util').then((util) => {
L698: utilModule = util;
Findings
1 Critical1 High6 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/chunk-2HPOD34J.cjs
HighCommand Output Exfiltrationdist/chunk-GWDDPYFO.mjs
MediumSecret Patterndist/chunk-GWDDPYFO.mjs
MediumDynamic Requiredist/chunk-GWDDPYFO.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/chunk-2HPOD34J.cjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @zapier/zapier-sdk@0.114.5.
See all versions of @zapier/zapier-sdk for other recorded verdicts.
- Review the evidence and your use of @zapier/zapier-sdk@0.114.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.