indiecorns@0.4.7
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI sends default runtime telemetry to PostHog that can include a signed-in user's ID and email. This is disclosed and can be disabled, but identifying details in analytics make the behavior suspicious under the review rules.
Static reason
One or more suspicious static signals were detected.
Trigger
Starting most CLI commands, unless telemetry is disabled.
Impact
The analytics service receives identifying details about signed-in users, creating a privacy risk.
Mechanism
The CLI captures command events and, for signed-in users, identifies them using their Indiecorns user ID and email. The default PostHog host is eu.i.posthog.com.
AI rationale
The CLI sends default runtime telemetry to PostHog that can include a signed-in user's ID and email. This is disclosed and can be disabled, but identifying details in analytics make the behavior suspicious under the review rules.
Evidence
indiecorns/bin/indiecorns.mjsREADME.md~/.indiecorns/config.json
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI sends telemetry automatically for commands other than `telemetry` and `analytics`; users can opt out with `--no-telemetry`.
- For signed-in users, the telemetry identity uses the Indiecorns user ID and includes the user's email among its person properties.
- The README discloses telemetry and identifies signed-in users, but sending identifying details to analytics still meets the review rule for suspicious telemetry.
- Worker-service persistence is invoked by the explicit `worker install` command.
Evidence against
- Telemetry can be disabled per command, in configuration, or through environment settings.
- The README describes the telemetry and provides status, disable, and enable commands.
- The service setup is an explicit worker command, rather than an install or import-time action.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L47: <RegistrationInfo><Description>Indiecorns community wor
Findings
2 High5 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
MediumAi Review Evidenceindiecorns/bin/indiecorns.mjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.7.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.