coda-cli@1.5.52
Coda-CLI是一款集“智能化 AI 协同”与“工程化标准”于一体的研发生产力基础设施命令行助手
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package has no install lifecycle scripts, and the reviewed process and network operations serve its documented CLI, Ollama, and AI chat functions. The package citation service was unavailable during review, so no source citations could be issued.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation, CLI command use, or explicit interaction with the VS Code chat extension.
Impact
No malicious impact identified.
Mechanism
The CLI uses shell commands and network requests for its documented AI, Ollama, and extension features; no unrelated automatic credential transfer or account action was found.
AI rationale
The package has no install lifecycle scripts, and the reviewed process and network operations serve its documented CLI, Ollama, and AI chat functions. The package citation service was unavailable during review, so no source citations could be issued.
Evidence
servers/agent-server/main.jsbin/index.jsgenerator/chat/index.js
Network endpoints3
registry.npmjs.orgollama.com/install.shapi.openai.com/v1
Decision evidence
public snapshotAI called this Clean at 79.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no lifecycle scripts; its bin entry exposes the coda CLI.
- The CLI dispatches named commands such as chat, setup ollama, and start server; the inspected network and shell operations are tied to those commands.
- The server sends configured AI requests to its configured model endpoint, with the API key supplied through its settings.
- The VS Code extension handles network requests in response to webview messages such as getModels and sendMessage.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggedbin/index.jsView file
1#!/usr/bin/env node
L2: (()=>{"use strict";var e={450(e,t,s){t.childProcess=void 0;const a=s(317);t.childProcess={runCmdLive:(e,t=process.cwd())=>new Promise(s=>{const n=(0,a.spawn)(e,{cwd:t,stdio:"inheri...
L3: //# sourceMappingURL=index.js.map
High
1#!/usr/bin/env node
L2: (()=>{"use strict";var e={450(e,t,s){t.childProcess=void 0;const a=s(317);t.childProcess={runCmdLive:(e,t=process.cwd())=>new Promise(s=>{const n=(0,a.spawn)(e,{cwd:t,stdio:"inheri...
L3: //# sourceMappingURL=index.js.map
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/index.jsView on unpkg · L1generator/chat/index.jsView file
1(()=>{"use strict";var e={450(e,t,a){t.childProcess=void 0;const s=a(317);t.childProcess={runCmdLive:(e,t=process.cwd())=>new Promise(a=>{const n=(0,s.spawn)(e,{cwd:t,stdio:"inheri...
L2: //# sourceMappingURL=index.js.map
Findings
4 High4 Medium5 Low
HighChild Processbin/index.js
HighSame File Env Network Executionbin/index.js
HighCommand Output Exfiltrationgenerator/chat/index.js
HighShips High Entropy Blobapps/coda-vscode-chat/coda-vscode-chat-1.0.0.vsix
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobapps/coda-vscode-chat/coda-vscode-chat-1.0.0.vsix
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionapps/coda-vscode-chat/coda-vscode-chat-1.0.0.vsix
Affected versions and remediation
This report applies to coda-cli@1.5.52.
See all versions of coda-cli for other recorded verdicts.
- Review the evidence and your use of coda-cli@1.5.52 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.