kubeagent@0.1.74
AI-powered Kubernetes management CLI
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe flagged source implements Kubernetes workload inspection and guarded, agent-requested approvals. Startup telemetry sends basic machine metadata to the package's own API, and no concrete attack behavior was found.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI invokes its startup telemetry call.
Impact
The API receives basic machine and CLI metadata; the inspected source showed no secret collection or unrelated recipient.
Mechanism
Telemetry sends the CLI version, operating system, architecture, Node version, and a generated machine identifier to the KubeAgent API, guarded by a local sent marker.
AI rationale
The flagged source implements Kubernetes workload inspection and guarded, agent-requested approvals. Startup telemetry sends basic machine metadata to the package's own API, and no concrete attack behavior was found.
Evidence
~/.kubeagent/.machine-id~/.kubeagent/.telemetry-sent
Network endpoints1
api.kubeagent.net/telemetry
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a CLI entrypoint and lists development and maintenance scripts, with no install lifecycle hook.
- The flagged workload source gathers Kubernetes workload and Helm release metadata using kubectl and decodes Helm data.
- Approval execution checks local records and refuses approvals that this agent did not request.
- CLI startup sends version and basic machine metadata to the KubeAgent API; telemetry is gated by a local sent marker.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicenseWildcardDependency
Source & flagged code
4 flaggeddist/detector/sources.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/detector/sources.jsView on unpkgdist/approvals.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = kubeagent@0.1.70
matchedIdentity = npm:a3ViZWFnZW50:0.1.70
similarity = 0.865
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/approvals.jsView on unpkgpackage.jsonView file
Findings
2 High3 Medium7 Low
HighSemantic Analysis Limiteddist/detector/sources.js
HighPrevious Version Dangerous Deltadist/approvals.js
MediumNetwork
MediumEnvironment Vars
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to kubeagent@0.1.74.
See all versions of kubeagent for other recorded verdicts.
- Review the evidence and your use of kubeagent@0.1.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.