indiecorns@0.4.5
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package’s documented runtime telemetry sends identifying details, including signed-in user email and command arguments, to its analytics service by default. Disclosure and opt-outs reduce concern, but this exceeds the anonymous usage telemetry allowed as clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Any ordinary CLI invocation, unless telemetry is disabled by a flag, environment setting, or config.
Impact
The analytics service receives identifying details and user-supplied command arguments beyond anonymous usage metrics.
Mechanism
The CLI captures command arguments and, for signed-in users, identifies the user with account properties including email.
AI rationale
The package’s documented runtime telemetry sends identifying details, including signed-in user email and command arguments, to its analytics service by default. Disclosure and opt-outs reduce concern, but this exceeds the anonymous usage telemetry allowed as clean.
Evidence
indiecorns/bin/indiecorns.mjsREADME.md~/.indiecorns/config.json
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The CLI automatically sends command-start telemetry for ordinary invocations.
- Telemetry includes up to three command arguments; the sanitizer does not remove arbitrary argument values.
- For signed-in users, telemetry identifies the account and includes the user’s email in person properties.
- The README discloses telemetry and documents ways to disable it, but that does not remove the identifying details sent by default.
- Worker service persistence is performed only through the explicit install command.
Evidence against
- Telemetry is sent to the configured PostHog host, which defaults to eu.i.posthog.com.
- No evidence showed OpenAI, Slack, or GitHub credentials being sent to an unrelated host.
- The README discloses telemetry and documents per-run and persistent opt-outs.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L47: <RegistrationInfo><Description>Indiecorns community wor
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
HighPrevious Version Dangerous Deltaindiecorns/bin/indiecorns.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.5.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.