create-sailor@2.0.1
Governed AI-native SaaS scaffolder for Nebutra Sailor. One converged Next.js + Hono + Prisma stack, zero questions — providers go live from env keys.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe source supports default runtime analytics with a documented opt-out, but suppresses the disclosure in CI and non-TTY modes. The scanner’s credential-redirection and command-output claims were not supported by the inspected source.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
After scaffolding succeeds, unless telemetry is disabled with NEBUTRA_TELEMETRY=0 or false.
Impact
Collects limited usage metadata; disclosure is absent in CI and non-TTY modes.
Mechanism
The CLI dynamically imports @nebutra/analytics and tracks scaffold.completed; its default host is analytics.nebutra.com. The event includes template version, package-manager name, and duration.
AI rationale
The source supports default runtime analytics with a documented opt-out, but suppresses the disclosure in CI and non-TTY modes. The scanner’s credential-redirection and command-output claims were not supported by the inspected source.
Evidence
dist/index.js~/.config/nebutra/first-run-acked (or the platform/config-directory equivalent)
Network endpoints1
analytics.nebutra.com
Decision evidence
public snapshotAI called this Suspicious at 85.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- After a successful scaffold, the CLI sends a `scaffold.completed` event with template version, package-manager name, and duration.
- Telemetry runs by default unless `NEBUTRA_TELEMETRY` is set to `0` or `false`; it uses an optional analytics module and defaults to `analytics.nebutra.com`.
- The analytics notice and opt-out instructions are skipped in CI and when either stream is not a TTY, so telemetry can run without disclosure in those modes.
Evidence against
- The manifest declares no lifecycle scripts; the flagged behavior is in the CLI entrypoint.
- The inspected source contains no AI API credential redirect or command-output exfiltration chain; subprocesses serve scaffolding tasks.
- The event payload contains only template version, package-manager name, and duration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggeddist/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = create-sailor@1.10.1
matchedIdentity = npm:Y3JlYXRlLXNhaWxvcg:1.10.1
similarity = 0.923
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg1#!/usr/bin/env node
L2: import{execSync as er}from"child_process";import ct from"fs";import me from"path";import*as lt from"@clack/prompts";import v from"picocolors";import{Command as dt}from"commander";i...
L3: `)+`
High
1#!/usr/bin/env node
L2: import{execSync as er}from"child_process";import ct from"fs";import me from"path";import*as lt from"@clack/prompts";import v from"picocolors";import{Command as dt}from"commander";i...
L3: `)+`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical6 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requirebin/create-sailor.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to create-sailor@2.0.1.
See all versions of create-sailor for other recorded verdicts.
- Review the evidence and your use of create-sailor@2.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.