ai4kanban@0.11.0
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package sends runtime usage telemetry by default, including a generated install ID and run metadata, without disclosure in its shipped README. The limited fields and available opt-out make this suspicious telemetry rather than credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Normal CLI startup and usage events while reporting remains enabled.
Impact
The vendor can receive pseudonymous usage and run metadata without an opt-in. The inspected telemetry flow does not include credentials or user content.
Mechanism
The CLI queues usage events with a generated install ID and sends batches by POST to the configured usage endpoint; reporting can be turned off with a package command.
AI rationale
The package sends runtime usage telemetry by default, including a generated install ID and run metadata, without disclosure in its shipped README. The limited fields and available opt-out make this suspicious telemetry rather than credential exfiltration.
Evidence
dist/kanban.mjs
Network endpoints2
api.ai4kanban.devAI4KANBAN_USAGE_URL (user-configurable)
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Usage reporting defaults to on when no setting exists.
- Normal CLI startup calls reportAppOpen(), which queues telemetry unless reporting is disabled.
- Run events include a harness name, custom-agent flag, and limited model information.
- Queued usage events are sent by POST to the configured usage endpoint.
- The package provides a command to turn usage reporting off, but the shipped README does not disclose the default reporting.
Evidence against
- The reported fields are usage metadata and a generated install ID; the inspected flow does not send credentials, prompts, code, or command output.
- The package has no install or postinstall hook; its prepare and prepublishOnly scripts are build-related.
- Provider keys are configured for the corresponding agent run, consistent with the package’s purpose.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggeddist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path112 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str5) => process2.stdout.write(str5),
L1221: writeErr: (str5) => process2.stderr.write(str5),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L591169var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path112 = __require("node:path");
High
2009}
L2010: const execArgv = process2.execArgv ?? [];
L2011: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
High
Findings
1 Critical4 High4 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
HighChild Processdist/kanban.mjs
HighShelldist/kanban.mjs
HighCommand Output Exfiltrationdist/kanban.mjs
HighKnown Malware Source Similaritydist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ai4kanban@0.11.0.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.11.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.