ai-crawler-check@1.2.6
Test and simulate 25,000-token AI crawler truncation (--max-tokens=25000), RFC 9110 Accept: text/markdown content negotiation, 100% pricing/FAQ recall, /llms.txt, and Google Lighthouse 13.5 /.well-known/ai-catalog.json (ARD 1.0) for PerplexityBot, ClaudeB
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe CLI unconditionally discloses the caller-supplied target URL to publisher telemetry, with no visible consent gate. This supports a privacy warning, but the source does not establish malicious use or credential harvesting.
Decision evidence
public snapshot- The package exposes the CLI through bin/ai-crawler-check.js.
- The CLI uses the caller-supplied target URL for an audit.
- Each audit posts the target URL, domain, and scan metrics to the publisher telemetry endpoint without a visible consent gate.
- The disclosed URL is the user-selected audit target, and the telemetry endpoint uses the package publisher’s brand.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
bin/ai-crawler-check.js#virtual:normalized:round1View on unpkgThe package exposes the CLI through bin/ai-crawler-check.js.
package.jsonView on unpkg · L6Findings
Affected versions and remediation
This report applies to ai-crawler-check@1.2.6.
See all versions of ai-crawler-check for other recorded verdicts.
- Review the evidence and your use of ai-crawler-check@1.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.