aislop@0.19.1
Catch the slop AI coding agents leave in your code: narrative comments, swallowed exceptions, as-any casts, dead code, oversized functions. 50+ rules across 10 language targets (TypeScript, JavaScript, Expo / React Native, Python, Go, Rust, Ruby, PHP, C#,
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged credential flow is not present: provider credentials remain with the selected local provider, and the package's observed telemetry goes to PostHog with an opt-out. The manifest has no install hook, and the remote-agent capability is tied to an explicit CLI command.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Telemetry runs during CLI commands; a coding-agent provider runs when the user invokes the agent feature.
Impact
No source evidence shows credentials being redirected to an unrelated host or agent tools being exposed remotely by default.
Mechanism
The CLI sends an anonymous install ID and allowlisted usage properties to eu.i.posthog.com. The agent feature launches a selected local provider with the user's environment.
AI rationale
The flagged credential flow is not present: provider credentials remain with the selected local provider, and the package's observed telemetry goes to PostHog with an opt-out. The manifest has no install hook, and the remote-agent capability is tied to an explicit CLI command.
Network endpoints1
eu.i.posthog.com/capture/
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the CLI and library but declares no install lifecycle hook.
- The agent feature is described as a user-invoked command; it launches the selected local provider and passes it the existing environment.
- CLI telemetry sends an anonymous install ID and allowlisted usage data to PostHog, and can be disabled by environment variables or configuration.
- The README links to telemetry documentation; no credential redirection to an unrelated host was found.
Evidence against
- Runtime telemetry is enabled by default outside CI and includes command and aggregate usage metrics.
- The CLI can launch coding-agent providers with the user's environment when the agent feature is used.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/core-D4295PVP.jsView file
1import { spawn } from "node:child_process";
L2: import process from "node:process";
High
Child Process
Package source references child process execution.
dist/core-D4295PVP.jsView on unpkg · L1dist/cli.jsView file
19854};
L19855: const isSafeShellSpawnArray = (content, matchIndex) => /^spawn\s*\(\s*\[/.test(content.slice(matchIndex)) && !/^\s*spawn\s*\(\s*\[\s*["'](?:sh|bash|zsh|cmd|cmd\.exe|powershell|pwsh...
L19856: const PLACEHOLDER_EXPR_RE = /^(?:placeholders?|placeholderList|bindMarkers?|bindingMarkers?|bindPlaceholders?|bindingPlaceholders?|parameterPlaceholders?|sqlPlaceholders?)(?:\.\w+\...
High
6Cross-file remote execution chain: dist/cli.js spawns dist/index.js; helper contains network access plus dynamic code execution.
L6: import { performance } from "node:perf_hooks";
L7: import { execSync, spawn, spawnSync } from "node:child_process";
L8: import os, { tmpdir } from "node:os";
...
L45: args: ["auth", "status"],
L46: okExitCodes: [0]
L47: },
...
L92: const commandExists = (bin) => {
L93: const command = process.platform === "win32" ? "where" : "which";
L94: const result = spawnSync(command, [bin], {
...
L138: try {
L139: const parsed = JSON.parse(fs.readFileSync(file, "utf-8"));
L140: if (!isProviderId(parsed.provider)) return null;
Findings
1 Critical5 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/core-D4295PVP.js
HighShelldist/cli.js
HighCredential Redirect Persistencedist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to aislop@0.19.1.
See all versions of aislop for other recorded verdicts.
- Review the evidence and your use of aislop@0.19.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.