registry / create-sailor / 1.9.6
create-sailor@1.9.6
Governed AI-native SaaS scaffolder for Nebutra Sailor. Bootstrap a production-ready Next.js + Hono + Prisma monorepo with multi-tenant foundations, region-aware defaults, and AI integrations.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection shows an interactive scaffolder with expected GitHub template retrieval and opt-out telemetry, not credential exfiltration or stealth persistence. Scanner claims of credential redirection and foreign-package overwrite were not substantiated by source.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User explicitly runs the create-sailor CLI.
Impact
Creates and optionally installs dependencies for the requested project.
Mechanism
Downloads a declared template and writes a selected project scaffold.
AI rationale
Static inspection shows an interactive scaffolder with expected GitHub template retrieval and opt-out telemetry, not credential exfiltration or stealth persistence. Scanner claims of credential redirection and foreign-package overwrite were not substantiated by source.
Evidence
package.jsondist/index.js
Network endpoints3
api.github.comgithub.comanalytics.nebutra.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Explicit CLI execution downloads a Nebutra template archive from GitHub.
- Completion telemetry is opt-out and imports an undeclared analytics module defensively.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Entrypoint actions are user-invoked scaffolding into the selected project directory.
- No source evidence of credential harvesting, foreign-package overwrite, or AI-agent configuration mutation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
11 flaggeddist/index.jsView file
1#!/usr/bin/env node
L2: import{execSync as gp}from"child_process";import os from"fs";import*as rs from"@clack/prompts";import L from"picocolors";import{Command as ps}from"commander";import Fn from"fs";imp...
L3: `):process.stdout.write(Vn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/index.jsView on unpkg · L11#!/usr/bin/env node
L2: import{execSync as gp}from"child_process";import os from"fs";import*as rs from"@clack/prompts";import L from"picocolors";import{Command as ps}from"commander";import Fn from"fs";imp...
L3: `):process.stdout.write(Vn.yellow(`\u26A0 ${o} support is coming in v1.2. Falling back to fumadocs.
L4: `)+Vn.dim(` Track progress: https://github.com/Nebutra/Nebutra-Sailor/issues
L5: `)),"fumadocs"}return"fumadocs"}function yt(e){switch(e){case"vercel":return"vercel";case"railway":return"railway";case"cloudflare":return"cloudflare";case"selfhost":return"selfhos...
L6: `);await te.promises.appendFile(n,`${s}
...
L459: onClick={() => {
L460: window.location.href = p.href;
L461: }}
...
L1511: ${c}`)}catch{try{ue.writeFileSync(o,c,{flag:"wx"})}catch{let p=ue.readFileSync(o,"ut
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/index.jsView on unpkg · L1Findings
4 Critical6 High4 Medium6 Low
CriticalSame File Env Network Executiondist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to create-sailor@1.9.6.
See all versions of create-sailor for other recorded verdicts.
- Review the evidence and your use of create-sailor@1.9.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.