aiblueprint-cli@1.4.110
AIBlueprint CLI for setting up AI coding configurations
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package's runtime telemetry is enabled by default and sends the home-directory path and error traces to the vendor endpoint, making this an undisclosed identifying-data telemetry risk. The reviewed Claude credential use is limited to Anthropic's own usage API, and I found no evidence of credential theft.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI setup or an error in supported setup and premium commands; telemetry is enabled unless explicitly disabled by environment variable.
Impact
The service receives the user's local home-directory path and diagnostic details, which exceed anonymous package and runtime telemetry.
Mechanism
POSTs event data to https://codelynx.dev/api/cli/events. Error events include the home directory and error message and stack trace.
AI rationale
The package's runtime telemetry is enabled by default and sends the home-directory path and error traces to the vendor endpoint, making this an undisclosed identifying-data telemetry risk. The reviewed Claude credential use is limited to Anthropic's own usage API, and I found no evidence of credential theft.
Evidence
dist/cli.jsagents-config/claude-config/scripts/statusline/src/lib/features/limits/index.ts
Network endpoints2
codelynx.devapi.anthropic.com
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI sends runtime telemetry to codelynx.dev by default; disabling it requires setting AIBLUEPRINT_TELEMETRY_DISABLED=1.
- Error telemetry includes the home directory, shell and locale, plus the error message and stack trace.
- Telemetry is called from CLI setup and error handlers, so it can run during ordinary user commands.
- The statusline reads a Claude Code credential and sends it to Anthropic's own usage API for usage-limit data.
Evidence against
- The credential flow is consistent with the statusline's usage-limit feature: it targets api.anthropic.com/api/oauth/usage rather than an unrelated host.
- The reviewed telemetry code sends diagnostics and system details; no credential or file-content exfiltration was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = aiblueprint-cli@1.4.96
matchedIdentity = npm:YWlibHVlcHJpbnQtY2xp:1.4.96
similarity = 0.926
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg625var EventEmitter = __require("node:events").EventEmitter;
L626: var childProcess = __require("node:child_process");
L627: var path = __require("node:path");
High
1067}
L1068: const execArgv2 = process2.execArgv ?? [];
L1069: if (execArgv2.includes("-e") || execArgv2.includes("--eval") || execArgv2.includes("-p") || execArgv2.includes("--print")) {
High
Findings
1 Critical7 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighSame File Env Network Executiondist/cli.js
HighSandbox Evasion Gated Capabilityagents-config/claude-config/scripts/statusline/src/lib/features/limits/index.ts
HighTrigger Reachable Persistencedist/cli.js
HighRuntime Package Installdist/cli.js
HighSemantic Analysis Limitedagents-config/skills/skill-manager/scripts/inspect-description.ts
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli.js
MediumShips Build Helperagents-config/skills/apex/scripts/setup-templates.sh
Affected versions and remediation
This report applies to aiblueprint-cli@1.4.110.
See all versions of aiblueprint-cli for other recorded verdicts.
- Review the evidence and your use of aiblueprint-cli@1.4.110 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.