registry / aiblueprint-cli / 1.4.112
aiblueprint-cli@1.4.112
AIBlueprint CLI for setting up AI coding configurations
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package’s network and credential behavior supports displaying Claude usage limits, and the token is sent only to Anthropic’s API. Dependency installation and configuration writes are reachable through the user-run setup workflow; no malicious automatic behavior was identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs the aiblueprint setup command and selects the custom statusline, which is also installed by the explicit --skip setup option.
Impact
The request is to Anthropic’s own service for the statusline feature; no unrelated credential destination or malicious action was found.
Mechanism
The statusline reads the Claude Code token from its credential file or macOS keychain and sends it as a bearer token to api.anthropic.com to retrieve usage limits.
AI rationale
The package’s network and credential behavior supports displaying Claude usage limits, and the token is sent only to Anthropic’s API. Dependency installation and configuration writes are reachable through the user-run setup workflow; no malicious automatic behavior was identified.
Evidence
~/.claude/.credentials.jsonstatusline/data/usage-limits-cache.json
Network endpoints2
api.anthropic.com/api/oauth/usagebun.sh/install
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI; its only lifecycle script is prepublishOnly, which builds the CLI.
- The setup command installs statusline dependencies only when the user runs setup and selects the custom statusline feature.
- The statusline reads Claude Code credentials and uses the token to request usage data from Anthropic’s own API endpoint.
- The added audit-test skill files contain test-review guidance, not instructions targeting this security review.
Evidence against
- Setup can install Bun and ccusage and write configuration files, but those actions are part of the user-run setup workflow.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
11 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = aiblueprint-cli@1.4.96
matchedIdentity = npm:YWlibHVlcHJpbnQtY2xp:1.4.96
similarity = 0.926
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg625var EventEmitter = __require("node:events").EventEmitter;
L626: var childProcess = __require("node:child_process");
L627: var path = __require("node:path");
High
1067}
L1068: const execArgv2 = process2.execArgv ?? [];
L1069: if (execArgv2.includes("-e") || execArgv2.includes("--eval") || execArgv2.includes("-p") || execArgv2.includes("--print")) {
High
Findings
1 Critical7 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighSame File Env Network Executiondist/cli.js
HighSandbox Evasion Gated Capabilityagents-config/claude-config/scripts/statusline/src/lib/features/limits/index.ts
HighTrigger Reachable Persistencedist/cli.js
HighRuntime Package Installdist/cli.js
HighSemantic Analysis Limitedagents-config/skills/skill-manager/scripts/inspect-description.ts
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli.js
MediumShips Build Helperagents-config/skills/apex/scripts/setup-templates.sh
Affected versions and remediation
This report applies to aiblueprint-cli@1.4.112.
See all versions of aiblueprint-cli for other recorded verdicts.
- Review the evidence and your use of aiblueprint-cli@1.4.112 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.