indiecorns@0.4.6
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package discloses runtime telemetry and provides an opt-out, but its events include signed-in users' email and account ID plus project-directory names. This matches the warning-level telemetry rule; the flagged recurring worker setup is explicitly user-triggered.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI startup and completion or failure for ordinary commands, unless telemetry is disabled.
Impact
Analytics events can associate a user's identity and project-directory names with their CLI activity.
Mechanism
The CLI captures signed-in user email and ID along with the working-directory name and app-root name. The default analytics host is https://eu.i.posthog.com.
AI rationale
The package discloses runtime telemetry and provides an opt-out, but its events include signed-in users' email and account ID plus project-directory names. This matches the warning-level telemetry rule; the flagged recurring worker setup is explicitly user-triggered.
Evidence
indiecorns/bin/indiecorns.mjs~/.indiecorns/config.json
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Normal CLI startup sends telemetry unless the user has disabled it.
- For signed-in users, telemetry identifies the user and includes their email and Indiecorns user ID.
- Telemetry also includes the current directory name and app-root directory name.
Evidence against
- The README discloses telemetry and provides commands to disable it.
- Worker persistence is installed only through the explicit `worker install` command.
- Slack and GitHub credentials are used with their respective provider APIs in worker operations.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L47: <RegistrationInfo><Description>Indiecorns community wor
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
HighPrevious Version Dangerous Deltaindiecorns/bin/indiecorns.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.6.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.