ai4kanban@0.10.2
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe suspicious indicators resolve to a command-line tool's provider setup and user-invoked helpers. The inspected source does not show credentials being sent automatically to a foreign host or a concealed payload executing.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The bundled CLI runs when a user invokes the ai4kanban or akb command.
Impact
The inspected paths do not establish automatic credential exfiltration or unrelated download-and-execute behavior.
Mechanism
It dispatches to the selected CLI command; provider credentials are referenced through provider-specific environment names. Install commands for supported tools are represented as strings.
AI rationale
The suspicious indicators resolve to a command-line tool's provider setup and user-invoked helpers. The inspected source does not show credentials being sent automatically to a foreign host or a concealed payload executing.
Evidence
package.jsonbin/ai4kanban.mjsdist/kanban.mjs
Network endpoints2
api.ai4kanban.devcursor.com
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI entry point; its prepare and prepublishOnly scripts build the package.
- The CLI loads the bundled rules when invoked and dispatches to an explicit command.
- The provider configuration maps credentials to provider-specific environment variable names, such as OPENAI_API_KEY.
- The Cursor install command appears as a provider install string; the inspected excerpt does not execute it.
- The version check invokes npm view from a CLI helper.
Evidence against
- The inspected source shows no automatic credential transfer to an unrelated host.
- The API4Kanban cloud URL is configurable, and the inspected excerpt does not show an automatic cloud request.
- The flagged download-and-run strings are offered as install commands for supported agent tools.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggeddist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path109 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str5) => process2.stdout.write(str5),
L1221: writeErr: (str5) => process2.stderr.write(str5),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L591169var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path109 = __require("node:path");
High
2009}
L2010: const execArgv = process2.execArgv ?? [];
L2011: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
High
Findings
1 Critical4 High4 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
HighChild Processdist/kanban.mjs
HighShelldist/kanban.mjs
HighCommand Output Exfiltrationdist/kanban.mjs
HighKnown Malware Source Similaritydist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ai4kanban@0.10.2.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.10.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.