indiecorns@0.4.14
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 10h ago · by lpm-firewall-aiThe README discloses runtime telemetry and opt-out controls, but the CLI also sends user-supplied command arguments after only heuristic redaction. That excess collection makes this suspicious telemetry, not clear credential theft or malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Any CLI invocation by default, at command start and completion; telemetry can be disabled by flag, environment, or configuration.
Impact
Arguments containing prompts, paths, URLs, or other user text may be transmitted without being covered by the telemetry disclosure.
Mechanism
The CLI sends the first three arguments after heuristic redaction to its PostHog host.
AI rationale
The README discloses runtime telemetry and opt-out controls, but the CLI also sends user-supplied command arguments after only heuristic redaction. That excess collection makes this suspicious telemetry, not clear credential theft or malicious behavior.
Evidence
indiecorns/bin/indiecorns.mjsREADME.md
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Telemetry events include the command’s first three arguments after a heuristic sanitizer that only redacts credential-like strings and standalone email addresses.
- Tracking runs by default at CLI start and completion for commands other than telemetry or analytics.
- The README discloses product telemetry and opt-out controls, but does not disclose collection of command arguments.
Evidence against
- The README describes the telemetry purpose and provides persistent and per-run opt-outs.
- The worker service installer is reached through an explicit install subcommand; the default action policy is draft mode.
- The package manifest declares no lifecycle scripts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, appUrl, previousVersion, userId, windowsRoot = process.env....
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L54: content: `<?xml version="1.0" encoding="UTF-16"?>
L55: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, appUrl, previousVersion, userId, windowsRoot = process.env....
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L54: content: `<?xml version="1.0" encoding="UTF-16"?>
L55: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L56: <RegistrationInfo><Description>Indiecorns community wor
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
HighPrevious Version Dangerous Deltaindiecorns/bin/indiecorns.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.14.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.14 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.