ai4kanban@0.9.3
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged credential references configure keys for selected AI providers, while Cloud requests use the package’s own session token. The inspected download command is Cursor’s official installer, tied to agent setup; no unrelated credential exfiltration or automatic harmful action was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the CLI or selects a Cloud, model-provider, or agent setup action.
Impact
No malicious impact was identified in the inspected flows.
Mechanism
The bundle routes configured provider keys to the selected agent and sends the package’s Cloud session token through its Cloud client. Cursor’s installer is associated with agent setup.
AI rationale
The flagged credential references configure keys for selected AI providers, while Cloud requests use the package’s own session token. The inspected download command is Cursor’s official installer, tied to agent setup; no unrelated credential exfiltration or automatic harmful action was found.
Network endpoints3
api.ai4kanban.devyajrbpprmdvtkvjjfpbk.supabase.cocursor.com/install
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a command-line executable; its entry point loads the bundle when the command runs.
- The README presents `akb install` as an explicit command to scaffold a project board.
- The bundle defines API keys as settings for a user-selected model provider.
- Cloud requests send the package’s own session token through its configured Cloud client.
Evidence against
- The bundle contains network requests and handles credentials, but the inspected flows match the CLI’s Cloud and AI-provider features.
- Cursor’s install command downloads and runs its official installer as an agent-specific setup action.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbin/ai4kanban.mjsView file
85}
L86: return import(pathToFileURL(file).href)
L87: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/ai4kanban.mjsView on unpkg · L85dist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path94 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str4) => process2.stdout.write(str4),
L1221: writeErr: (str4) => process2.stderr.write(str4),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L5959* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path94 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str4) => process2.stdout.write(str4),
L1221: writeErr: (str4) => process2.stderr.write(str4),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Findings
1 Critical4 Medium7 Low
CriticalCredential Exfiltrationdist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to ai4kanban@0.9.3.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.9.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.