ai4kanban@0.10.1
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged credential references configure API keys for user-selected agent providers, while the network activity found includes AI4Kanban usage reporting. That reporting is described in the CLI with privacy information and an off command; no malicious credential flow or install-time attack was found.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when invoked; usage events may be queued and sent during normal command use.
Impact
No unwanted credential forwarding, account action, or harmful install-time behavior was identified.
Mechanism
Selected provider credentials are supplied to the corresponding agent process. Anonymous usage events are sent to the AI4Kanban telemetry endpoint; the CLI provides a way to turn reporting off.
AI rationale
The flagged credential references configure API keys for user-selected agent providers, while the network activity found includes AI4Kanban usage reporting. That reporting is described in the CLI with privacy information and an off command; no malicious credential flow or install-time attack was found.
Network endpoints3
t.ai4kanban.devapi.ai4kanban.devapi.openai.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI; its launcher routes the supplied arguments to the board or agent command.
- Provider API keys are configured as secrets and passed under the selected provider's expected environment variable.
- Usage reporting is on by default, but the CLI describes it as anonymous, links to privacy information, and provides an on/off command.
- Reported run details include limited fields such as harness and model; usage batches go to the AI4Kanban telemetry endpoint.
Evidence against
- The manifest has no preinstall, install, or postinstall hook; its prepare script runs the build.
- No source path was found that sends discovered model-provider credentials to AI4Kanban or an unrelated host.
- The bundled shell download commands refer to official tool installer hosts and are setup options, not automatic install hooks.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggeddist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path107 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str5) => process2.stdout.write(str5),
L1221: writeErr: (str5) => process2.stderr.write(str5),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L591169var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path107 = __require("node:path");
High
2009}
L2010: const execArgv = process2.execArgv ?? [];
L2011: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
High
Findings
1 Critical4 High4 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
HighChild Processdist/kanban.mjs
HighShelldist/kanban.mjs
HighCommand Output Exfiltrationdist/kanban.mjs
HighKnown Malware Source Similaritydist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ai4kanban@0.10.1.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.10.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.