kubeagent@0.1.75
AI-powered Kubernetes management CLI
AI Security Review
scanned 21d ago · by lpm-firewall-aiSource inspection found no malicious behavior or install-time execution. The flagged wildcard is development-only, approval execution is guarded, and the first-run telemetry is limited and sent to the package’s own API.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI when its first-run telemetry marker is absent.
Impact
KubeAgent receives limited CLI and machine telemetry; the inspected event does not include credentials.
Mechanism
The CLI posts its version, platform details, and a machine identifier to KubeAgent’s fixed telemetry endpoint.
AI rationale
Source inspection found no malicious behavior or install-time execution. The flagged wildcard is development-only, approval execution is guarded, and the first-run telemetry is limited and sent to the package’s own API.
Evidence
dist/cli.jsdist/telemetry.js
Network endpoints1
api.kubeagent.net
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and lists only build, development, test, and formatting scripts; it has no install lifecycle hook.
- The wildcard dependency is in devDependencies, so it is not a published runtime dependency.
- The detector fetches Kubernetes workload resources and extracts image and label metadata.
- Approval actions are schema-validated and, when a local ledger is used, must match an action and parameters recorded by the agent.
- The CLI sends a one-time first-run event containing CLI and platform details plus a machine identifier to KubeAgent’s API.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicenseWildcardDependency
Source & flagged code
4 flaggeddist/detector/sources.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/detector/sources.jsView on unpkgdist/approvals.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = kubeagent@0.1.70
matchedIdentity = npm:a3ViZWFnZW50:0.1.70
similarity = 0.865
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/approvals.jsView on unpkgpackage.jsonView file
Findings
2 High3 Medium7 Low
HighSemantic Analysis Limiteddist/detector/sources.js
HighPrevious Version Dangerous Deltadist/approvals.js
MediumNetwork
MediumEnvironment Vars
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Dependency Evidencepackage.json
Affected versions and remediation
This report applies to kubeagent@0.1.75.
See all versions of kubeagent for other recorded verdicts.
- Review the evidence and your use of kubeagent@0.1.75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.