indiecorns@0.4.8
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package discloses telemetry, but its default events transmit signed-in user identifiers and email along with command arguments. The stated rules classify telemetry carrying identifying details as suspicious even when disclosed.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Runs automatically when a CLI command starts, unless telemetry is disabled.
Impact
The telemetry provider receives user-identifying information and command context; the package documents telemetry and offers opt-outs.
Mechanism
The CLI sends signed-in user identity, including email, and command details to its configured PostHog host.
AI rationale
The package discloses telemetry, but its default events transmit signed-in user identifiers and email along with command arguments. The stated rules classify telemetry carrying identifying details as suspicious even when disclosed.
Evidence
indiecorns/bin/indiecorns.mjsREADME.md~/.indiecorns/config.json
Network endpoints3
eu.i.posthog.comINDIECORNS_POSTHOG_HOST overridePOSTHOG_HOST override
Decision evidence
public snapshotAI called this Suspicious at 95.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- CLI telemetry identifies signed-in users with their Indiecorns user ID and email.
- Telemetry includes the command and up to three command arguments after limited sanitization.
- The CLI starts a telemetry event automatically when a command runs, unless telemetry is disabled.
- The default telemetry host is eu.i.posthog.com.
- The CLI stores a generated anonymous telemetry ID in its config file.
Evidence against
- The README discloses product telemetry and says it identifies signed-in users.
- Telemetry can be disabled in config, with environment variables, or for one invocation.
- The default worker action policy is draft, and external actions require an explicit execute policy and allowlist.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, userId, windowsRoot = process.env.SystemRoot ?? 'C:\\Window...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L45: content: `<?xml version="1.0" encoding="UTF-16"?>
L46: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L47: <RegistrationInfo><Description>Indiecorns community wor
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
HighPrevious Version Dangerous Deltaindiecorns/bin/indiecorns.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.8.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.