create-sailor@1.10.1
Governed AI-native SaaS scaffolder for Nebutra Sailor. Bootstrap a production-ready Next.js + Hono + Prisma monorepo with multi-tenant foundations, region-aware defaults, and AI integrations.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is not conclusively malicious, but its default runtime retrieval of mutable remote content followed by installation creates a concrete remote code-execution supply-chain risk.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs create-sailor without a local template override.
Impact
A compromised template branch could place malicious files or lifecycle dependencies in the generated project.
Mechanism
Downloads a mutable GitHub template and runs dependency installation.
AI rationale
The package is not conclusively malicious, but its default runtime retrieval of mutable remote content followed by installation creates a concrete remote code-execution supply-chain risk.
Evidence
dist/index.jsbin/create-sailor.jspackage.json<selected project directory>
Network endpoints2
api.github.comgithub.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The manifest exposes a CLI and main entrypoint, making dist/index.js reachable when the user runs create-sailor.
- The CLI resolves mutable GitHub main branches, downloads and extracts an archive into the selected project, then runs the chosen package manager install by default.
- The remote template is not pinned by an embedded immutable digest; a future repository compromise could turn normal scaffolding into downstream code execution.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- No source evidence shows collection or transmission of the user's existing environment secrets.
- The proxy URL is only an example in an interactive custom-endpoint prompt, not a fixed credential redirect.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
10 flaggedbin/create-sailor.jsView file
27process.argv[1] = entry;
L28: await import(pathToFileURL(entry).href);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/create-sailor.jsView on unpkg · L27dist/index.jsView file
1#!/usr/bin/env node
L2: import{execSync as Rp}from"child_process";import us from"fs";import Dn from"path";import*as ms from"@clack/prompts";import x from"picocolors";import{Command as hs}from"commander";i...
L3: `):process.stdout.write(Wn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L11#!/usr/bin/env node
L2: import{execSync as Rp}from"child_process";import us from"fs";import Dn from"path";import*as ms from"@clack/prompts";import x from"picocolors";import{Command as hs}from"commander";i...
L3: `):process.stdout.write(Wn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
L4: `)+Wn.dim(` Track progress: https://github.com/Nebutra/Nebutra-Sailor/issues
L5: `)),"fumadocs"}return"fumadocs"}function ht(e){switch(e){case"vercel":return"vercel";case"railway":return"railway";case"cloudflare":return"cloudflare";case"selfhost":return"selfhos...
L6: `);await re.promises.appendFile(n,`${s}
...
L459: onClick={() => {
L460: window.location.href = p.href;
L461: }}
...
L1511: ${c}`)}catch{try{ge.writeFileSync(o,c,{flag:"wx"})}catch{let p=ge.readFileSync(o,"ut
Findings
4 Critical4 High5 Medium6 Low
CriticalSame File Env Network Executiondist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requirebin/create-sailor.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertemplates/backends/python/_shared/__init__.py
Affected versions and remediation
This report applies to create-sailor@1.10.1.
See all versions of create-sailor for other recorded verdicts.
- Review the evidence and your use of create-sailor@1.10.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.