instabox@0.8.46
A cloud box for your coding agent, the instabox CLI and its agent skills in one command: npx instabox@latest
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged agent configuration writes are the CLI’s documented onboarding behavior: it installs this package’s own skills when the user runs the CLI and can be skipped with --no-skills. The telemetry is limited to usage and runtime details, is disclosed with an opt-out, and no malicious behavior was found in the reviewed paths.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the instabox CLI onboarding command; telemetry is sent during onboarding when enabled.
Impact
Expected onboarding and skill setup, plus limited usage analytics; no unauthorized credential collection or account actions were identified.
Mechanism
The CLI copies package-provided skills to agent skill directories. Telemetry reports onboarding outcome and runtime details to the package’s analytics host, with an opt-out.
AI rationale
The flagged agent configuration writes are the CLI’s documented onboarding behavior: it installs this package’s own skills when the user runs the CLI and can be skipped with --no-skills. The telemetry is limited to usage and runtime details, is disclosed with an opt-out, and no malicious behavior was found in the reviewed paths.
Evidence
~/.claude/skills~/.agents/skillsinstabox telemetry configuration directory (telemetry.json)
Network endpoints2
api.instabox.shus.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes bin/instabox.mjs as its CLI entry point and declares no install lifecycle hook.
- The CLI installs the package’s own skills into ~/.claude/skills and ~/.agents/skills during onboarding; it preserves existing unmarked skills and supports --no-skills.
- Onboarding runs when the user invokes the CLI with its onboarding arguments.
- Telemetry is described as reporting command names and outcomes, never arguments, and can be disabled with INSTABOX_NO_TELEMETRY=1 or DO_NOT_TRACK=1.
- Onboarding telemetry sends outcome and runtime details to the package’s analytics flow; the implementation checks that the server is api.instabox.sh and telemetry is enabled.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbin/instabox.mjsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
sync(join(dir, rel), { withfiletypes: true })
.sort((a, b) => a.name.localecompare(b.name))
.flatmap((e) => {
const r = rel ? `${rel}/${e.name}` : e.name;
return e.isdirectory() ? skillfiles(dir, r) : e.isfile() ? [r] : [];
});
}
const retired_skills = [
'instabox-migrate',
'instabox-move-all',
];
function removeretiredskills(roots) {
const removed = new set();
for (const root of roots)
for (const n of retired_skills) {
try {
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/instabox.mjsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = instabox@0.8.58
matchedIdentity = npm:aW5zdGFib3g:0.8.58
similarity = 0.842
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/instabox.mjsView on unpkgFindings
2 High5 Medium5 Low
HighExternal Ai Agent Control Surface Mutationbin/instabox.mjs
HighPrevious Version Dangerous Deltabin/instabox.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarycli/instabox-windows-arm64.exe
MediumShips Build Helperskills/instabox-basic-setup/scripts/install-files.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to instabox@0.8.46.
See all versions of instabox for other recorded verdicts.
- Review the evidence and your use of instabox@0.8.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.