ai4kanban@0.9.4
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI enables runtime telemetry by default and reports app opens without the disclosure gate used for the desktop app. Because the inspected telemetry is limited to basic usage and platform metrics and goes to the package's own service, this warrants a warning rather than a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
An ordinary CLI invocation calls the app-open reporting path; queued events are sent when the reporting schedule allows.
Impact
The vendor can associate recurring usage events with an installation without informing CLI users first. The inspected data is limited to usage and platform metrics.
Mechanism
Absent a saved preference, reporting is enabled. The CLI queues usage events with a persistent install ID and sends them to the package's telemetry service; the disclosure check shown applies to the desktop app surface, not the command surface.
AI rationale
The CLI enables runtime telemetry by default and reports app opens without the disclosure gate used for the desktop app. Because the inspected telemetry is limited to basic usage and platform metrics and goes to the package's own service, this warrants a warning rather than a malicious verdict.
Evidence
dist/kanban.mjs${AI4KANBAN_HOME || ~/.ai4kanban}/usage-queue.jsonl${AI4KANBAN_HOME || ~/.ai4kanban}/usage-state.json${AI4KANBAN_HOME || ~/.ai4kanban}/settings.json
Network endpoints1
t.ai4kanban.dev/v1/batch
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Usage reporting defaults to enabled when the setting is absent.
- Ordinary CLI startup calls reportAppOpen; the disclosure gate applies only to the desktop app surface.
- The app-open event includes OS and architecture fields, and queued events are sent by POST to the package telemetry endpoint.
Evidence against
- The reported fields shown are basic usage and platform metrics; the inspected telemetry path does not send provider credentials or project contents.
- The telemetry endpoint belongs to the package's own domain, and the CLI exposes a telemetry-off setting.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbin/ai4kanban.mjsView file
85}
L86: return import(pathToFileURL(file).href)
L87: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/ai4kanban.mjsView on unpkg · L85dist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path98 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str4) => process2.stdout.write(str4),
L1221: writeErr: (str4) => process2.stderr.write(str4),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L598608turn {
// Absent means on; anything that is not a boolean is an answer this build cannot read,
// and the safe reading of one is off.
on: answer2 === void 0 ? true : answer2 ===
Findings
1 Critical5 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencedist/kanban.mjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ai4kanban@0.9.4.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.9.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.