kubeagent@0.1.58
AI-powered Kubernetes management CLI
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe automatic persistent telemetry is a concrete unconsented data-flow risk, and scanner coverage was incomplete. The inspected source does not establish malicious installation behavior or hidden code execution.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Run any kubeagent CLI command; separately, invoke kubeagent agent install and confirm it.
Impact
Vendor receives host telemetry; an approved installation can delete pods and update deployments.
Mechanism
Automatic telemetry transmission and explicitly confirmed Kubernetes agent deployment.
AI rationale
The automatic persistent telemetry is a concrete unconsented data-flow risk, and scanner coverage was incomplete. The inspected source does not establish malicious installation behavior or hidden code execution.
Evidence
dist/cli.jsdist/telemetry.jsdist/agent/install.jsdist/agent/manifest.js$HOME/.kubeagent/.machine-id$HOME/.kubeagent/.telemetry-sent
Network endpoints1
api.kubeagent.net/telemetry
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Every CLI invocation calls telemetry after parsing commands.
- The telemetry payload includes a stable machine identifier and host metadata sent to the vendor API.
- The package can install a cluster-wide role with pod deletion and deployment update permissions after explicit confirmation.
- The flagged detector source reads Kubernetes workload metadata; no hidden payload was found there, but incomplete scanner coverage prevents a clean verdict.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- No eval, VM, encoded payload loader, or runtime self-dependency was found.
- Cluster changes are behind an explicit agent install command and confirmation.
- Mutating diagnostic actions require approval unless explicitly allowlisted.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
4 flaggeddist/detector/sources.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/detector/sources.jsView on unpkgdist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = kubeagent@0.1.54
matchedIdentity = npm:a3ViZWFnZW50:0.1.54
similarity = 0.872
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg813program.parse();
// Non-blocking update check — runs after command completes
if (!isInClusterInvocation(process.argv))
checkForUpdate();
sendTelemetry(version);
Findings
2 High5 Medium5 Low
HighSemantic Analysis Limiteddist/detector/sources.js
HighPrevious Version Dangerous Deltadist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumWildcard Dependency
MediumAi Review Evidencedist/cli.js
MediumAi Review Evidencedist/telemetry.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to kubeagent@0.1.58.
See all versions of kubeagent for other recorded verdicts.
- Review the evidence and your use of kubeagent@0.1.58 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.