aislop@0.19.0
Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 10 language targets (TypeScript, JavaScript, Expo / React Native, Python, Go, Rust, Ruby, PHP, C#,
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe CLI sends runtime telemetry by default, including command and coarse project metrics, but the packaged README does not disclose this collection. The payload is allowlisted and no credential or source-content exfiltration was identified, so this warrants a telemetry warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands that run through the command lifecycle; telemetry is enabled by default outside CI unless disabled.
Impact
The vendor receives command usage and coarse project metrics without an explicit telemetry disclosure in the packaged README.
Mechanism
The CLI sends allowlisted usage and runtime properties to eu.i.posthog.com and stores a random install ID locally.
AI rationale
The CLI sends runtime telemetry by default, including command and coarse project metrics, but the packaged README does not disclose this collection. The payload is allowlisted and no credential or source-content exfiltration was identified, so this warrants a telemetry warning rather than a block.
Evidence
dist/cli.js~/.aislop/install_id$XDG_STATE_HOME/aislop/install_id
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI usage telemetry is sent to eu.i.posthog.com by default; AISLOP_NO_TELEMETRY or DO_NOT_TRACK disables it.
- The CLI records command names, detected languages, and file-count buckets when commands run.
- Telemetry also includes an anonymous install ID and basic runtime and platform fields.
Evidence against
- The telemetry payload is limited by an allowlist and contains no observed credentials, file contents, or command arguments.
- The Anthropic API key mention is a setup hint for the user’s local Pi provider; no credential forwarding to the badge host was found.
- The manifest declares no install, preinstall, or postinstall hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/core-D4295PVP.jsView file
1import { spawn } from "node:child_process";
L2: import process from "node:process";
High
Child Process
Package source references child process execution.
dist/core-D4295PVP.jsView on unpkg · L1dist/cli.jsView file
19854};
L19855: const isSafeShellSpawnArray = (content, matchIndex) => /^spawn\s*\(\s*\[/.test(content.slice(matchIndex)) && !/^\s*spawn\s*\(\s*\[\s*["'](?:sh|bash|zsh|cmd|cmd\.exe|powershell|pwsh...
L19856: const PLACEHOLDER_EXPR_RE = /^(?:placeholders?|placeholderList|bindMarkers?|bindingMarkers?|bindPlaceholders?|bindingPlaceholders?|parameterPlaceholders?|sqlPlaceholders?)(?:\.\w+\...
High
6Cross-file remote execution chain: dist/cli.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L6: import { performance } from "node:perf_hooks";
L7: import { execSync, spawn, spawnSync } from "node:child_process";
L8: import os, { tmpdir } from "node:os";
...
L45: args: ["auth", "status"],
L46: okExitCodes: [0]
L47: },
...
L92: const commandExists = (bin) => {
L93: const command = process.platform === "win32" ? "where" : "which";
L94: const result = spawnSync(command, [bin], {
...
L138: try {
L139: const parsed = JSON.parse(fs.readFileSync(file, "utf-8"));
L140: if (!isProviderId(parsed.provider)) return null;
Findings
1 Critical5 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/core-D4295PVP.js
HighShelldist/cli.js
HighCredential Redirect Persistencedist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to aislop@0.19.0.
See all versions of aislop for other recorded verdicts.
- Review the evidence and your use of aislop@0.19.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.