linkshell-cli@0.10.49
Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found a narrowly scoped native-helper permission fix and user-invoked product behavior. The flagged host, login, process, and network operations are consistent with LinkShell functionality, and the inspected source did not establish credential exfiltration or unconsented agent configuration changes.
Decision evidence
public snapshot- package.json runs a postinstall script; that script only sets execute permissions on `node-pty` spawn helpers.
- Login returns tokens from a loopback callback and saves them locally after querying the configured LinkShell auth service.
- The host reads agent configuration directories and usage events for statistics; it does not write agent settings there.
- Host access tokens are sent only when the selected gateway matches the official LinkShell gateway.
- Port previews connect to local loopback services, consistent with the documented device preview function.
- Upgrade behavior is invoked by the CLI command and updates the LinkShell installation.
Source & flagged code
8 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to linkshell-cli@0.10.49.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.10.49 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.