aiblueprint-cli@1.4.109
AIBlueprint CLI for setting up AI coding configurations
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe CLI's error telemetry sends the user's home-directory path and potentially identifying paths in error details to the publisher's service by default. This is suspicious runtime telemetry; the reviewed credential request goes to Anthropic's own service, and dependency installation is tied to explicit setup commands.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user-run setup or premium CLI command encounters an error; successful setup commands also send feature or event telemetry.
Impact
The publisher's telemetry service receives identifying local-path information and potentially paths in error messages or stack traces.
Mechanism
The CLI posts telemetry to codelynx.dev. Error reports include system information with os.homedir(), plus the error message and stack trace. The opt-out is AIBLUEPRINT_TELEMETRY_DISABLED=1.
AI rationale
The CLI's error telemetry sends the user's home-directory path and potentially identifying paths in error details to the publisher's service by default. This is suspicious runtime telemetry; the reviewed credential request goes to Anthropic's own service, and dependency installation is tied to explicit setup commands.
Evidence
dist/cli.js~/.config/aiblueprint/token.txt (existence checked; XDG_CONFIG_HOME may override the base directory)
Network endpoints2
codelynx.dev/api/cli/eventsapi.anthropic.com/api/oauth/usage
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On CLI errors, telemetry sends system details including the user's home directory to https://codelynx.dev/api/cli/events.
- Error reports include the error message and up to 1,500 characters of stack trace; telemetry is disabled only when AIBLUEPRINT_TELEMETRY_DISABLED=1.
- The CLI also sends setup and premium command events during user-run actions.
Evidence against
- The package has no install lifecycle hook; its prepublishOnly script builds the CLI.
- Claude usage tokens are sent to Anthropic's own usage endpoint.
- Dependency installation and shell setup are reached through explicit CLI setup commands.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
11 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = aiblueprint-cli@1.4.96
matchedIdentity = npm:YWlibHVlcHJpbnQtY2xp:1.4.96
similarity = 0.926
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg625var EventEmitter = __require("node:events").EventEmitter;
L626: var childProcess = __require("node:child_process");
L627: var path = __require("node:path");
High
1067}
L1068: const execArgv2 = process2.execArgv ?? [];
L1069: if (execArgv2.includes("-e") || execArgv2.includes("--eval") || execArgv2.includes("-p") || execArgv2.includes("--print")) {
High
Findings
1 Critical7 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighSame File Env Network Executiondist/cli.js
HighSandbox Evasion Gated Capabilityagents-config/claude-config/scripts/statusline/src/lib/features/limits/index.ts
HighTrigger Reachable Persistencedist/cli.js
HighRuntime Package Installdist/cli.js
HighSemantic Analysis Limitedagents-config/skills/skill-manager/scripts/inspect-description.ts
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli.js
MediumShips Build Helperagents-config/skills/apex/scripts/setup-templates.sh
Affected versions and remediation
This report applies to aiblueprint-cli@1.4.109.
See all versions of aiblueprint-cli for other recorded verdicts.
- Review the evidence and your use of aiblueprint-cli@1.4.109 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.