instabox@0.8.156
A cloud box for your coding agent, the instabox CLI and its agent skills in one command: npx instabox@latest
AI Security Review
scanned 17h ago · by lpm-firewall-aiThe source matches the stated cloud-box CLI purpose, has no install lifecycle hooks, and discloses runtime usage telemetry with opt-outs. The referenced downloads and shell changes belong to user-invoked remote dependency setup; no credential exfiltration or unsolicited account action was found.
Static reason
No blocking static signals were detected.
Trigger
CLI actions and skill steps run when users invoke them; there are no npm install hooks.
Impact
Expected service access, disclosed usage reporting, and user-invoked setup; no malicious collection or account action was identified.
Mechanism
The CLI contacts the Instabox API for its service and sends disclosed, opt-out runtime usage telemetry to PostHog. Migration scripts install missing runtimes on the remote box when the user runs them.
AI rationale
The source matches the stated cloud-box CLI purpose, has no install lifecycle hooks, and discloses runtime usage telemetry with opt-outs. The referenced downloads and shell changes belong to user-invoked remote dependency setup; no credential exfiltration or unsolicited account action was found.
Network endpoints5
api.instabox.shus.i.posthog.commise.runraw.githubusercontent.combun.sh
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies Instabox as a cloud-box CLI and declares no install lifecycle scripts.
- The CLI discloses usage telemetry and provides INSTABOX_NO_TELEMETRY and DO_NOT_TRACK opt-outs.
- Telemetry is sent to PostHog and is gated on the configured Instabox server and a signed-in account.
- The repo migration skill tells users to run dependency installation over SSH on the box; its download commands are for installing missing runtimes.
- Stored credentials are loaded only when their server matches the requested server.
Evidence against
- The package includes native CLI binaries whose behavior is not fully established by the available binary analysis.
- The migration helper can download and run third-party runtime installers and update shell startup files when users invoke the migration steps.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
5 flaggedcli/instabox-windows-arm64.exeView file
•path = cli/instabox-windows-arm64.exe
kind = native_binary
sizeBytes = 9172992
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
cli/instabox-windows-arm64.exeView on unpkgskills/instabox-basic-setup/scripts/install-files.pyView file
•path = skills/instabox-basic-setup/scripts/install-files.py
kind = build_helper
sizeBytes = 2977
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
skills/instabox-basic-setup/scripts/install-files.pyView on unpkgpackage.jsonView file
Findings
5 Medium7 Low
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarycli/instabox-windows-arm64.exe
MediumShips Build Helperskills/instabox-basic-setup/scripts/install-files.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/instabox.mjs
LowAi Review Evidencelib/telemetry.mjs
Affected versions and remediation
This report applies to instabox@0.8.156.
See all versions of instabox for other recorded verdicts.
- Review the evidence and your use of instabox@0.8.156 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.