instabox@0.8.45
A cloud box for your coding agent, the instabox CLI and its agent skills in one command: npx instabox@latest
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and its agent-skill writes occur during an explicitly invoked onboarding command and are limited to its own skills. Telemetry is disclosed, opt-out is supported, and API credentials are sent to the configured Instabox service.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User invokes the CLI onboarding command; telemetry can be disabled with INSTABOX_NO_TELEMETRY=1 or DO_NOT_TRACK=1.
Impact
Expected package setup and account-linked usage reporting; no unrelated credential transfer or unauthorized agent-setting change was identified.
Mechanism
Onboarding contacts the configured Instabox API, copies package skills into user-level skill directories, and sends usage events to PostHog.
AI rationale
The package has no install lifecycle hook, and its agent-skill writes occur during an explicitly invoked onboarding command and are limited to its own skills. Telemetry is disclosed, opt-out is supported, and API credentials are sent to the configured Instabox service.
Evidence
~/.claude/skills/<skill>/~/.agents/skills/<skill>/~/.config/instabox/credentials.json~/.config/instabox/telemetry.jsonCLI install directory selected by the package or user
Network endpoints2
api.instabox.shus.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares no install, preinstall, or postinstall hook.
- Agent skill installation runs through the CLI onboarding flow when the user invokes the command.
- The installer copies this package’s skills and preserves existing skill files that are not marked as installed by instabox.
- The onboarding telemetry reports command outcome and runtime details; the CLI documents the data and an opt-out.
- Authenticated API requests send credentials to the configured Instabox server.
Evidence against
- The package writes skills into user-level Claude and agent skill directories.
- The CLI sends telemetry to PostHog when telemetry is enabled.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbin/instabox.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
sync(join(dir, rel), { withfiletypes: true })
.sort((a, b) => a.name.localecompare(b.name))
.flatmap((e) => {
const r = rel ? `${rel}/${e.name}` : e.name;
return e.isdirectory() ? skillfiles(dir, r) : e.isfile() ? [r] : [];
});
}
const retired_skills = [
'instabox-migrate',
'instabox-move-all',
];
function removeretiredskills(roots) {
const removed = new set();
for (const root of roots)
for (const n of retired_skills) {
try {
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/instabox.mjsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = instabox@0.8.41
matchedIdentity = npm:aW5zdGFib3g:0.8.41
similarity = 0.944
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/instabox.mjsView on unpkgFindings
2 High5 Medium5 Low
HighExternal Ai Agent Control Surface Mutationbin/instabox.mjs
HighPrevious Version Dangerous Deltabin/instabox.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarycli/instabox-windows-arm64.exe
MediumShips Build Helperskills/instabox-basic-setup/scripts/install-files.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to instabox@0.8.45.
See all versions of instabox for other recorded verdicts.
- Review the evidence and your use of instabox@0.8.45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.