luzra-cli@0.2.7
터미널 AI(Claude Code) 프롬프트 습관을 채점·코칭하는 리포트 — 세션 로그는 로컬에서만 분석됩니다.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has a legitimate scoring and dashboard-sync purpose, and the diagnostic data is partially sanitized and sent to the configured dashboard. However, it also sends a separate, undocumented stream of runtime error details, so this merits a warning for undisclosed telemetry.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `report`, including through the scheduled daily report; crashes during `report` also trigger a send.
Impact
Dashboard operators receive error diagnostics not described in the README; masking and truncation reduce, but do not eliminate, the chance of exposing sensitive context in error messages.
Mechanism
The CLI POSTs run metrics and summarized, masked error details to the configured dashboard's `/api/runs` endpoint using the dashboard token.
AI rationale
The package has a legitimate scoring and dashboard-sync purpose, and the diagnostic data is partially sanitized and sent to the configured dashboard. However, it also sends a separate, undocumented stream of runtime error details, so this merits a warning for undisclosed telemetry.
Evidence
src/telemetry.jssrc/run.jsbin/luzra.jsREADME.md
Network endpoints1
luzra.aimgonna.com/api/runs (default dashboard; the base URL is configurable)
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI posts run diagnostics to the configured dashboard's `/api/runs` endpoint when a sync URL and token are present.
- The diagnostics include run status and summarized error details; messages are masked, the home directory is replaced, and each detail is capped at 200 characters.
- `report` sends diagnostics after a run and also sends a summary on crashes, including during scheduled runs.
- The README describes dashboard uploads of scoring reports and prompt handling, but does not disclose this separate error-reporting request.
Evidence against
- The diagnostics go to the user-configured dashboard and use its token; they are not sent to an unrelated collector.
- Error messages are masked, home paths are replaced, and message details are truncated.
- Dashboard connection is a user-confirmed step in `init`, and the scheduler is installed as part of that documented setup.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
Source & flagged code
8 flaggedsrc/connect.jsView file
1// 디바이스 코드 페어링 — 토큰을 사람이 복사·전달할 필요가 없다.
L2: import { spawn } from "node:child_process";
L3: import { c, blank, info, ok, warn } from "./ui.js";
High
1// 디바이스 코드 페어링 — 토큰을 사람이 복사·전달할 필요가 없다.
L2: import { spawn } from "node:child_process";
L3: import { c, blank, info, ok, warn } from "./ui.js";
L4:
L5: export const DEFAULT_URL = "https://luzra.aimgonna.com";
L6:
...
L8: const cmd =
L9: process.platform === "win32" ? ["cmd", ["/c", "start", "", url]]
L10: : process.platform === "darwin" ? ["open", [url]]
...
L23: headers: { "Content-Type": "application/json" },
L24: body: JSON.stringify(body || {}),
L25: });
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
src/connect.jsView on unpkg · L1src/install.jsView file
17// Windows의 npm은 npm.cmd라 shell이 필요하다. 인자를 배열로 주면 경고가 나므로 문자열로 넘긴다.
L18: const r = spawnSync("npm root -g", { encoding: "utf-8", shell: true });
L19: const dir = (r.stdout || "").trim();
Findings
1 Critical6 High4 Medium4 Low
CriticalPrevious Version Dangerous Deltasrc/schedule.js
HighChild Processsrc/connect.js
HighShellsrc/install.js
HighSandbox Evasion Gated Capabilitysrc/connect.js
HighTrigger Reachable Persistencesrc/schedule.js
HighRuntime Package Installsrc/install.js
HighSemantic Analysis Limitedsrc/engine.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencesrc/schedule.js
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to luzra-cli@0.2.7.
See all versions of luzra-cli for other recorded verdicts.
- Review the evidence and your use of luzra-cli@0.2.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.