aiblueprint-cli@1.4.113
AIBlueprint CLI for setting up AI coding configurations
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe error telemetry sends local identifying information, including the home directory and stack trace, to the vendor without clear disclosure. This warrants a warning; the inspected credential flow sends a Claude token to Anthropic’s own usage endpoint for the statusline feature.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs setup and it fails; telemetry can be disabled with AIBLUEPRINT_TELEMETRY_DISABLED=1.
Impact
The vendor receives a local path and error details that may expose environment or project context. This supports a warning-level telemetry verdict.
Mechanism
The error handler posts the error message, stack trace, and system information—including the home directory and premium-token-file presence—to https://codelynx.dev/api/cli/events.
AI rationale
The error telemetry sends local identifying information, including the home directory and stack trace, to the vendor without clear disclosure. This warrants a warning; the inspected credential flow sends a Claude token to Anthropic’s own usage endpoint for the statusline feature.
Evidence
dist/cli.js
Network endpoints2
codelynx.dev/api/cli/eventsapi.anthropic.com/api/oauth/usage
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On setup errors, the CLI sends the error message, up to 1,500 characters of stack trace, and system information to its telemetry endpoint.
- The error payload includes the home directory and whether an AIBlueprint premium token file exists; the code offers an environment-variable opt-out.
- This telemetry is triggered when the explicit setup command fails.
Evidence against
- The telemetry can be disabled with AIBLUEPRINT_TELEMETRY_DISABLED=1, though the package does not disclose this collection in the inspected manifest.
- The statusline sends its Claude token to api.anthropic.com to retrieve Claude usage limits, matching the feature’s purpose.
- The manifest identifies the executable as a CLI for setting up AI coding configurations.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = aiblueprint-cli@1.4.96
matchedIdentity = npm:YWlibHVlcHJpbnQtY2xp:1.4.96
similarity = 0.926
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg625var EventEmitter = __require("node:events").EventEmitter;
L626: var childProcess = __require("node:child_process");
L627: var path = __require("node:path");
High
1067}
L1068: const execArgv2 = process2.execArgv ?? [];
L1069: if (execArgv2.includes("-e") || execArgv2.includes("--eval") || execArgv2.includes("-p") || execArgv2.includes("--print")) {
High
Findings
1 Critical7 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighShelldist/cli.js
HighSame File Env Network Executiondist/cli.js
HighSandbox Evasion Gated Capabilityagents-config/claude-config/scripts/statusline/src/lib/features/limits/index.ts
HighTrigger Reachable Persistencedist/cli.js
HighRuntime Package Installdist/cli.js
HighSemantic Analysis Limitedagents-config/skills/skill-manager/scripts/inspect-description.ts
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/cli.js
MediumShips Build Helperagents-config/skills/apex/scripts/setup-templates.sh
Affected versions and remediation
This report applies to aiblueprint-cli@1.4.113.
See all versions of aiblueprint-cli for other recorded verdicts.
- Review the evidence and your use of aiblueprint-cli@1.4.113 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.