registry / create-sailor / 1.8.1
create-sailor@1.8.1
Governed AI-native SaaS scaffolder for Nebutra Sailor. Bootstrap a production-ready Next.js + Hono + Prisma monorepo with multi-tenant foundations, region-aware defaults, and AI integrations.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection shows a broad scaffolding CLI with package-aligned telemetry and generated integration templates, but no install-time execution, credential harvesting, exfiltration, foreign agent-control mutation, or remote payload execution. Scanner findings are explained by bundled dependencies and expected scaffolder behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs create-sailor CLI.
Impact
Creates and mutates files in the chosen target project; may run package install/git init unless disabled.
Mechanism
Interactive/non-interactive SaaS project scaffolding
AI rationale
Static inspection shows a broad scaffolding CLI with package-aligned telemetry and generated integration templates, but no install-time execution, credential harvesting, exfiltration, foreign agent-control mutation, or remote payload execution. Scanner findings are explained by bundled dependencies and expected scaffolder behavior.
Evidence
package.jsondist/index.jsdist/chunk-ZIBRKYXP.jsREADME.mdtemplates/
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- dist/index.js sends package-aligned anonymous telemetry via Xn after scaffold completion unless NEBUTRA_TELEMETRY disables it.
- dist/index.js runs chosen package manager install and git init in the generated project by default.
- dist/index.js writes MCP scaffold/env examples when --mcp is on, but inside the generated project only.
Evidence against
- package.json has no preinstall/install/postinstall hooks; only prepublishOnly build hook.
- dist/index.js is a user-invoked scaffolder CLI that copies/templates files under the requested target directory.
- Credential-looking env vars are written as empty/example template values for generated app providers.
- Network URLs are provider docs/API placeholders for generated app integrations, not observed secret exfiltration.
- No writes to foreign AI-agent config paths such as .cursor, .claude, or .codex were found.
- dist/chunk-ZIBRKYXP.js eval/dynamic patterns appear bundled dependency code, not reached as an attack chain.
Behavioral surface
ChildProcessCrypto
Source & flagged code
9 flaggeddist/index.jsView file
1#!/usr/bin/env node
L2: import"./chunk-IYWUY3VA.js";import{execSync as Vc}from"child_process";import Vr from"fs";import Kr from"path";import*as ot from"@clack/prompts";import F from"picocolors";import{Com...
L3: `):process.stdout.write(kn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L11#!/usr/bin/env node
L2: import"./chunk-IYWUY3VA.js";import{execSync as Vc}from"child_process";import Vr from"fs";import Kr from"path";import*as ot from"@clack/prompts";import F from"picocolors";import{Com...
L3: `):process.stdout.write(kn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
L4: `)+kn.dim(` Track progress: https://github.com/Nebutra/Nebutra-Sailor/issues
L5: `)),"fumadocs"}return"fumadocs"}function Zt(e){switch(e){case"vercel":return"vercel";case"railway":return"railway";case"cloudflare":return"cloudflare";case"selfhost":return"selfhos...
L6: `);await ee.promises.appendFile(n,`${s}
...
L459: onClick={() => {
L460: window.location.href = p.href;
L461: }}
...
L1510: `;if(!be.existsSync(n)&&!be.existsSync(o))be.writeFileSync(o,c);else{let p=s?xi(s):"
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L1Findings
3 Critical4 High6 Medium7 Low
CriticalSame File Env Network Executiondist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighEvaldist/chunk-ZIBRKYXP.js
HighCommand Output Exfiltrationdist/index.js
HighOversized Source Filedist/query_compiler_fast_bg.postgresql.wasm-base64-URHQ2Y3Y.js
MediumDynamic Requiredist/chunk-ZIBRKYXP.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Build Helpertemplates/backends/python/_shared/__init__.py
Medium
Affected versions and remediation
This report applies to create-sailor@1.8.1.
See all versions of create-sailor for other recorded verdicts.
- Review the evidence and your use of create-sailor@1.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.