ai4kanban@0.9.5
AI4Kanban's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged provider hosts correspond to model and agent configuration, while the observed telemetry sends usage events to the package’s own endpoint. Reporting defaults on, but the CLI documents this and offers an off command; no credential exfiltration or other attack behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the CLI can queue usage events; Cloud access follows sign-in and a Cloud command.
Impact
The observed network activity supports the package’s usage reporting and Cloud features; no malicious impact was identified.
Mechanism
Usage batches go to the package’s telemetry endpoint. Cloud session tokens go to the package’s Cloud API; no unrelated credential collection or transmission was identified.
AI rationale
The flagged provider hosts correspond to model and agent configuration, while the observed telemetry sends usage events to the package’s own endpoint. Reporting defaults on, but the CLI documents this and offers an off command; no credential exfiltration or other attack behavior was identified.
Evidence
machineHome()/settings.jsonmachineHome()/usage-queue.jsonlmachineHome()/usage-state.jsonmachineHome()/session.json
Network endpoints4
t.ai4kanban.devt-dev.ai4kanban.devapi.ai4kanban.devyajrbpprmdvtkvjjfpbk.supabase.co
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes CLI aliases that load the bundled command implementation.
- Usage reporting defaults on, but the CLI documents it and provides a command to turn it off.
- The reported data is an event batch with a random install ID and usage events, sent to the package’s telemetry endpoint.
- Cloud requests use a session token with the package’s Cloud API; the sign-in flow uses GitHub OAuth authorization.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbin/ai4kanban.mjsView file
85}
L86: return import(pathToFileURL(file).href)
L87: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/ai4kanban.mjsView on unpkg · L85dist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path94 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str4) => process2.stdout.write(str4),
L1221: writeErr: (str4) => process2.stderr.write(str4),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L5959* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path94 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str4) => process2.stdout.write(str4),
L1221: writeErr: (str4) => process2.stderr.write(str4),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Findings
1 Critical4 Medium7 Low
CriticalCredential Exfiltrationdist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to ai4kanban@0.9.5.
See all versions of ai4kanban for other recorded verdicts.
- Review the evidence and your use of ai4kanban@0.9.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.