ai4kanban@0.8.0
⚠ Under reviewAI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
3 flaggedbin/ai4kanban.mjsView file
161async function rules() {
L162: return import(pathToFileURL(builtRules()).href)
L163: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/ai4kanban.mjsView on unpkg · L161dist/kanban.mjsView file
50// `kind` is the machine-readable name of the refusal (card-not-found, no-board,
L51: // unknown-track, …). It is what a caller reads; the exit code stays 1 for every
L52: // refusal, so nobody has to keep a table of numbers.
...
L175: DIR_FLAG = "";
L176: setBoardRoot(process.cwd());
L177: rel = (p) => path.relative(REPO_ROOT, p) || p;
...
L181: // src/lib/agent/worktree.ts
L182: import { spawnSync } from "node:child_process";
L183: import fs2 from "node:fs";
...
L209: windowsHide: true,
L210: ...env ? { env: { ...process.env, ...env } } : {}
L211: });
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L5050// `kind` is the machine-readable name of the refusal (card-not-found, no-board,
L51: // unknown-track, …). It is what a caller reads; the exit code stays 1 for every
L52: // refusal, so nobody has to keep a table of numbers.
...
L175: DIR_FLAG = "";
L176: setBoardRoot(process.cwd());
L177: rel = (p) => path.relative(REPO_ROOT, p) || p;
...
L181: // src/lib/agent/worktree.ts
L182: import { spawnSync } from "node:child_process";
L183: import fs2 from "node:fs";
...
L209: windowsHide: true,
L210: ...env ? { env: { ...process.env, ...env } } : {}
L211: });
Findings
1 Critical4 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ai4kanban@0.8.0.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.