registry / bailian-cli-runtime / 2.0.0
bailian-cli-runtime@2.0.0
Runtime framework for bailian-cli (createCli, registry, args, output, pipeline). See https://www.npmjs.com/package/bailian-cli for usage.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic review shows a library runtime with no lifecycle scripts and no import-time execution. Registry checks, global self-update, and skill sync run only after the host CLI is invoked and target the product's own package and endpoints.
Static reason
One or more suspicious static signals were detected.
Trigger
A user or host application calls the exported CLI run path. Package install does not execute this code.
Impact
No unconsented credential theft, remote payload, or foreign agent-config mutation was found. Effects stay within the Bailian CLI update and command flow the user started.
Mechanism
The command pipeline may check the npm registry for a newer host CLI release and, on a large gap, install that release and refresh the local agent skill through the same CLI.
AI rationale
Static review shows a library runtime with no lifecycle scripts and no import-time execution. Registry checks, global self-update, and skill sync run only after the host CLI is invoked and target the product's own package and endpoints.
Network endpoints3
registry.npmjs.orgbailian.console.aliyun.comhelp.aliyun.com
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json names bailian-cli-runtime 2.0.0 as a library with exports to dist/index.mjs and scripts limited to build, dev, test, and check. There is no bin entry and no preinstall, install, or postinstall hook.
- dist/index.mjs is an ESM library. The npm registry version check and optional global update run only inside the CLI command pipeline after the host program calls run, not at install or import time.
- Update and download requests use registry.npmjs.org and the product's Aliyun console and help hosts. Credentials stay with the DashScope client the caller configures.
Evidence against
- On a large version gap the same CLI path can run npm install -g of the host package and bl skill update. That is explicit product self-update after the user starts the CLI, not an install-time control-surface write.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
5 flaggeddist/index.mjsView file
1import{BINARY_PRODUCT_CLIENT_NAME as e,BailianError as t,COMMAND_PACK_API_VERSION as n,CONSOLE_AUTH_FLAGS as r,Client as i,DEFAULT_INSTALL_PS1_URL as a,DEFAULT_INSTALL_SCRIPT_URL a...
L2: `),o=i.join(`
High
1import{BINARY_PRODUCT_CLIENT_NAME as e,BailianError as t,COMMAND_PACK_API_VERSION as n,CONSOLE_AUTH_FLAGS as r,Client as i,DEFAULT_INSTALL_PS1_URL as a,DEFAULT_INSTALL_SCRIPT_URL a...
L2: `),o=i.join(`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L11import{BINARY_PRODUCT_CLIENT_NAME as e,BailianError as t,COMMAND_PACK_API_VERSION as n,CONSOLE_AUTH_FLAGS as r,Client as i,DEFAULT_INSTALL_PS1_URL as a,DEFAULT_INSTALL_SCRIPT_URL a...
L2: `),o=i.join(`
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsFindings
4 High4 Medium5 Low
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
MediumDynamic Requiredist/index.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to bailian-cli-runtime@2.0.0.
See all versions of bailian-cli-runtime for other recorded verdicts.
- Review the evidence and your use of bailian-cli-runtime@2.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.