dasyl@2.1.3
Dasyl is a fast, opinionated CLI for creating, configuring, and releasing modern development projects in seconds.
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe source shows conditional credential exposure because an unrestricted DASYL_API_URL override receives the saved token without a recipient-specific guard. The default endpoint appears package-aligned, so this supports a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
Any CLI process exit starts the detached telemetry helper when a saved token exists.
Impact
If DASYL_API_URL points to an unrelated endpoint, that recipient receives the saved token. No recipient-specific consent guard is shown.
Mechanism
The helper reads the token from the local Dasyl configuration and sends it as a bearer credential to DASYL_API_URL, which has no destination allowlist.
AI rationale
The source shows conditional credential exposure because an unrestricted DASYL_API_URL override receives the saved token without a recipient-specific guard. The default endpoint appears package-aligned, so this supports a warning rather than a block.
Evidence
lib/send-telemetry.jsbin/index.jslib/commands/login.jslib/commands/account.js
Network endpoints1
dasyl-ten.vercel.app
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest points to a CLI entrypoint and contains no install lifecycle hook.
- The CLI starts a detached telemetry helper whenever process.exit is called.
- The helper reads the saved Dasyl API token and sends it as a bearer token to the configured API base URL, without a recipient allowlist or separate consent check.
- Login accepts a Dasyl token and verifies it against the same configurable API base URL before saving it.
- Account queries and build telemetry also use the configured Dasyl API; build events include the project name and framework.
Evidence against
- The default API host is used consistently for Dasyl login, account queries and telemetry, which is consistent with the package’s service.
- The telemetry helper sends command status, platform and Node version; inspected source does not establish a default transfer of hostnames, home paths or secrets.
- The credential exposure depends on DASYL_API_URL being set to an unrelated endpoint; the source does not show that override being set by default.
Behavioral surface
ChildProcess
Source & flagged code
5 flaggedlib/send-telemetry.jsView file
1import axios from 'axios';
L2: import os from 'os';
...
L9: const __filename = fileURLToPath(import.meta.url);
L10: const __dirname = path.dirname(__filename);
L11: dotenv.config({ path: path.join(__dirname, '..', '.env'), quiet: true });
L12:
L13: const getApiUrl = () => process.env.DASYL_API_URL || 'https://dasyl-ten.vercel.app';
L14:
...
L19: try {
L20: const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
L21: return config.apiToken;
...
L29: (async () => {
High
Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
lib/send-telemetry.jsView on unpkg · L113const getApiUrl = () => process.env.DASYL_API_URL || 'https://dasyl-ten.vercel.app';
// Helper to get token directly to avoid importing login.js which might have Side Effects
const getApiToken = () => {
const configPath = path.join(os.homedir(), '.
Medium
Ai Review Evidence
The helper reads the saved Dasyl API token and sends it as a bearer token to the configured API base URL, without a recipient allowlist or separate consent check.
lib/send-telemetry.jsView on unpkg · L13lib/telemetry.jsView file
Findings
2 High6 Medium4 Low
HighHost Fingerprint Exfiltrationlib/send-telemetry.js
HighSandbox Evasion Gated Capabilitylib/telemetry.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencebin/index.js
MediumAi Review Evidencelib/send-telemetry.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to dasyl@2.1.3.
See all versions of dasyl for other recorded verdicts.
- Review the evidence and your use of dasyl@2.1.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.