dokugen@14.0.10
Readme generator command line tool.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe automatic hook is limited to a package-relative chmod attempt. The network and file access are reached through the package's explicit AI CLI features, with no separate malicious chain found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs generate, update, changelog, or ai-commit.
Impact
Project source, git content, and basic git or system metadata may be disclosed to the package backend during those commands.
Mechanism
User-invoked project analysis and backend API requests.
AI rationale
The automatic hook is limited to a package-relative chmod attempt. The network and file access are reached through the package's explicit AI CLI features, with no separate malicious chain found.
Evidence
package.jsondist/scripts/postinstall.mjsdist/bin/helpers/network.mjsdist/bin/helpers/readme.mjsdist/bin/commands/generate.mjsdist/bin/commands/changelog.mjsdist/bin/commands/aic.mjs./bin/dokugen.tsREADME.mdCHANGELOG.md.dokugen
Network endpoints3
dokugen.samueltuoyo.com/api/get-server-urlregistry.npmjs.org/dokugen/latestwww.google.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The install hook automatically loads a postinstall module.
- The postinstall module changes permissions only on a package-relative command path.
- User-invoked AI commands send project source, git data, and user metadata to the package backend.
Evidence against
- The install hook has no network, shell, persistence, or broad project mutation behavior.
- Network submission occurs inside explicit generate, changelog, or commit command handlers.
- No remote code loading, credential harvesting, self-dependency, or AI-agent control-surface mutation was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node -e "import('fs').then(fs => { if (fs.existsSync('dist/scripts/postinstall.mjs')) import('./dist/scripts/postinstall.mjs'); }).catch(() => {})"
Critical
Red Install Lifecycle Script
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg•scripts.postinstall = node -e "import('fs').then(fs => { if (fs.existsSync('dist/scripts/postinstall.mjs')) import('./dist/scripts/postinstall.mjs'); }).catch(() => {})"
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•Runtime dependency names matching Node built-ins: fs
High
Node Builtin Dependency Squat
Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkgdist/bin/commands/changelog.mjsView file
Findings
2 Critical6 High3 Medium5 Low
CriticalRed Install Lifecycle Scriptpackage.json
CriticalPrevious Version Dangerous Deltadist/bin/helpers/readme.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/bin/commands/changelog.mjs
HighShelldist/bin/helpers/readme.mjs
HighSame File Env Network Executiondist/bin/helpers/readme.mjs
HighRuntime Package Installdist/bin/helpers/network.mjs
HighNode Builtin Dependency Squatpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/bin/helpers/fileOps.mjs
Affected versions and remediation
This report applies to dokugen@14.0.10.
See all versions of dokugen for other recorded verdicts.
- Review the evidence and your use of dokugen@14.0.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.