indiecorns@0.4.9
Indiecorns CLI and agent plugin for account sign-in, onboarding tasks, and local setup checks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package’s disclosed runtime telemetry also sends project directory names, which can identify a user’s work and are not mentioned in its telemetry disclosure. This warrants a warning; the flagged service persistence is tied to explicit setup or install commands, and the default worker policy does not enable external account actions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI command starts or completes while telemetry is enabled, which is the default.
Impact
Project names may identify a user's work or organization. The README discloses telemetry generally but does not mention these project-name fields.
Mechanism
Telemetry properties include the basenames of the current working directory and application root; CLI events are sent through PostHog.
AI rationale
The package’s disclosed runtime telemetry also sends project directory names, which can identify a user’s work and are not mentioned in its telemetry disclosure. This warrants a warning; the flagged service persistence is tied to explicit setup or install commands, and the default worker policy does not enable external account actions.
Evidence
indiecorns/bin/indiecorns.mjsREADME.md
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI telemetry includes the current working directory name and application root name.
- Telemetry events are sent automatically when CLI commands start and complete.
- The README discloses product telemetry and provides a telemetry-disable command.
Evidence against
- The package has no install lifecycle scripts; service persistence is created by an explicit install or setup command.
- Worker setup defaults to draft mode, and the default policy has no external account actions enabled.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedindiecorns/lib/service.mjsView file
3Trigger-reachable persistence chain: manifest.bin -> indiecorns/bin/indiecorns.mjs -> indiecorns/lib/service.mjs
L3: import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, appUrl, userId, windowsRoot = process.env.SystemRoot ?? 'C:...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L50: content: `<?xml version="1.0" encoding="UTF-16"?>
L51: <Task version="1.4" xmlns="htt
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
indiecorns/lib/service.mjsView on unpkg · L33import { homedir, platform } from 'node:os'
L4: import { spawnSync } from 'node:child_process'
L5: const label = 'com.indiecorns.worker'
...
L9: const unitQuote = value => '"' + String(value).replace(/%/g, '%%').replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\$/g, () => '$$') + '"'
L10: export function serviceDefinition({ system = platform(), home = homedir(), node = process.execPath, cli, interval = 300, appUrl, userId, windowsRoot = process.env.SystemRoot ?? 'C:...
L11: if (!cli || !Number.isInteger(interval) || interval < 1) throw new Error('Invalid service configuration')
...
L50: content: `<?xml version="1.0" encoding="UTF-16"?>
L51: <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
L52: <RegistrationInfo><Description>Indiecorns community wor
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgeindiecorns/bin/indiecorns.mjs
HighTrigger Reachable Persistenceindiecorns/lib/service.mjs
HighPrevious Version Dangerous Deltaindiecorns/bin/indiecorns.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceindiecorns/lib/service.mjs
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to indiecorns@0.4.9.
See all versions of indiecorns for other recorded verdicts.
- Review the evidence and your use of indiecorns@0.4.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.