registry / linkshell-cli / 0.10.45
linkshell-cli@0.10.45
Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe postinstall hook only adjusts permissions on node-pty’s packaged helper. Login and gateway token flows are tied to LinkShell’s authentication service and official gateway, while the host and upgrade behavior matches the CLI’s stated functions; the inspected source does not establish an attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The permission fix runs during installation; login, host operation, and upgrade are activated through CLI commands.
Impact
No attack impact was established; the inspected behavior supports authentication, remote host features, usage summaries, and updates.
Mechanism
Login returns through a loopback callback and checks tokens with the configured authentication service. The host sends a stored token only when using the official gateway.
AI rationale
The postinstall hook only adjusts permissions on node-pty’s packaged helper. Login and gateway token flows are tied to LinkShell’s authentication service and official gateway, while the host and upgrade behavior matches the CLI’s stated functions; the inspected source does not establish an attack.
Network endpoints4
itool.tech/en/auth/linkshellmkbeusztkzffnzjdwmqk.supabase.cowss://gateway.itool.techregistry.npmjs.org/linkshell-cli/latest
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook resolves node-pty and changes permissions on its listed platform helper binaries.
- Login is an explicit CLI command. It uses a loopback callback, validates the returned token with the configured Supabase service, and saves the login locally.
- The host forwards a stored token only when the selected gateway matches LinkShell’s official gateway; token refresh uses the configured Supabase service.
- The host reads selected agent logs for usage statistics and exposes summaries through host RPC; the inspected parser filters Codex records to token-count events.
- The process and input code supports host discovery and screen-control features; the inspected process calls use fixed diagnostic tools or the packaged input helper.
- Upgrade checks the npm registry and conditionally follows an update path from the CLI.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/host/src/ports.jsView file
1import { execFile } from "node:child_process";
L2: import { readlink } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
1 Critical6 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/host/src/input.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/host/src/ports.js
HighShell
HighCommand Output Exfiltrationdist/cli/src/commands/upgrade.js
HighTrigger Reachable Command Output Exfiltrationdist/cli/src/commands/login.js
HighSemantic Analysis Limiteddist/cli/src/commands/host.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/cli/src/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to linkshell-cli@0.10.45.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.10.45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.