registry / create-sailor / 1.10.0
create-sailor@1.10.0
Governed AI-native SaaS scaffolder for Nebutra Sailor. Bootstrap a production-ready Next.js + Hono + Prisma monorepo with multi-tenant foundations, region-aware defaults, and AI integrations.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe suspicious primitives are consistent with a user-invoked SaaS scaffold generator and are not triggered during package installation. Source inspection found no credential exfiltration, stealth persistence, or automatic consumer-project mutation.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the create-sailor CLI.
Impact
Creates and configures the requested scaffold project.
Mechanism
User-invoked template download and project generation.
AI rationale
The suspicious primitives are consistent with a user-invoked SaaS scaffold generator and are not triggered during package installation. Source inspection found no credential exfiltration, stealth persistence, or automatic consumer-project mutation.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and has only a prepublish build hook, not an install lifecycle hook.
- The user-invoked CLI downloads a Sailor template archive from GitHub as part of scaffolding.
- The flagged degradation file is an inactive example test that must be moved before a scaffold includes it.
Evidence against
- No automatic install-time execution or self-dependency is present.
- No source path was found that harvests local credentials or sends them to a fixed third-party endpoint.
- Child-process and file writes are used for the requested project-scaffolding workflow.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
11 flaggeddist/index.jsView file
1#!/usr/bin/env node
L2: import{execSync as gp}from"child_process";import os from"fs";import*as rs from"@clack/prompts";import L from"picocolors";import{Command as ps}from"commander";import Fn from"fs";imp...
L3: `):process.stdout.write(Vn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L11#!/usr/bin/env node
L2: import{execSync as gp}from"child_process";import os from"fs";import*as rs from"@clack/prompts";import L from"picocolors";import{Command as ps}from"commander";import Fn from"fs";imp...
L3: `):process.stdout.write(Vn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
L4: `)+Vn.dim(` Track progress: https://github.com/Nebutra/Nebutra-Sailor/issues
L5: `)),"fumadocs"}return"fumadocs"}function yt(e){switch(e){case"vercel":return"vercel";case"railway":return"railway";case"cloudflare":return"cloudflare";case"selfhost":return"selfhos...
L6: `);await te.promises.appendFile(n,`${s}
...
L459: onClick={() => {
L460: window.location.href = p.href;
L461: }}
...
L1511: ${c}`)}catch{try{ue.writeFileSync(o,c,{flag:"wx"})}catch{let p=ue.readFileSync(o,"ut
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L1Findings
4 Critical5 High5 Medium6 Low
CriticalSame File Env Network Executiondist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltatemplates/tests/degradation.test.example.ts
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requirebin/create-sailor.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to create-sailor@1.10.0.
See all versions of create-sailor for other recorded verdicts.
- Review the evidence and your use of create-sailor@1.10.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.