ai4kanban@0.9.1
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI reports usage by default without the disclosure check applied to the app surface, making this undisclosed runtime telemetry. The inspected payload is limited to usage and platform metadata, so the finding warrants a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Starting an ordinary CLI command, at most once per day.
Impact
Usage patterns and basic platform details are reported without an explicit disclosure step.
Mechanism
The CLI queues usage events with a random install ID and sends batches to the package’s telemetry endpoint. The command path does not require the app’s disclosure flag.
AI rationale
The CLI reports usage by default without the disclosure check applied to the app surface, making this undisclosed runtime telemetry. The inspected payload is limited to usage and platform metadata, so the finding warrants a warning rather than a block.
Evidence
dist/kanban.mjsbin/ai4kanban.mjsusage-queue.jsonlusage-state.json
Network endpoints1
t.ai4kanban.dev/v1/batch
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI calls `reportAppOpen()` on ordinary command invocations.
- Usage reporting defaults to on; the disclosure check applies to the app surface, not the command surface.
- The report uses a random install ID and sends limited usage fields, such as version, OS, architecture, and event type, to `https://t.ai4kanban.dev/v1/batch`.
Evidence against
- The inspected telemetry fields do not include credentials, project files, or environment values.
- The package’s `prepare` and `prepublishOnly` scripts build or check the package; no install-time network activity was identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbin/ai4kanban.mjsView file
85}
L86: return import(pathToFileURL(file).href)
L87: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/ai4kanban.mjsView on unpkg · L8592async function main() {
const argv = process.argv.slice(2)
const loaded = await rules()
const shared = { program: PROGRAM, installHint: `\`${PROGRAM} install\`` }
if (argv[0] === 'raw') {
process.exitCode = await loaded.runBoard(argv.slice(1), { ...shared, program: `${PROGRAM} raw` })
return
}
const { runAgent } = loaded
if
Medium
Ai Review Evidence
The CLI calls `reportAppOpen()` on ordinary command invocations.
bin/ai4kanban.mjsView on unpkg · L92dist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path82 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str4) => process2.stdout.write(str4),
L1221: writeErr: (str4) => process2.stderr.write(str4),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Findings
1 Critical5 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencebin/ai4kanban.mjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ai4kanban@0.9.1.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.9.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.