onveloz@0.0.0-beta.55
CLI da plataforma Veloz — deploy rápido para o Brasil
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe init wizard performs undisclosed-by-prompt runtime collection of prompts, tool records, and identifiable project metadata, so this is suspicious telemetry rather than credential theft. The scanner's Anthropic credential warning is not substantiated: the Anthropic key occurrence is only an error-string check, while device auth uses the configured Veloz API.
Static reason
One or more suspicious static signals were detected.
Trigger
When the user runs the init wizard, its completion, error, or abort path finalizes the session and starts the upload unless VELOZ_NO_TELEMETRY=1.
Impact
Prompt and tool records may contain project content or secrets, while metadata identifies the user's project and account; the source does not show a consent prompt for this collection.
Mechanism
The CLI authenticates to its configured Veloz API, requests presigned upload URLs, then PUTs nonempty session files to the returned URLs.
AI rationale
The init wizard performs undisclosed-by-prompt runtime collection of prompts, tool records, and identifiable project metadata, so this is suspicious telemetry rather than credential theft. The scanner's Anthropic credential warning is not substantiated: the Anthropic key occurrence is only an error-string check, while device auth uses the configured Veloz API.
Evidence
dist/index.mjsdist/config-Bivuursk.mjssessionDir/meta.jsonsessionDir/events.jsonlsessionDir/sdk-messages.jsonlsessionDir/tool-calls.jsonlsessionDir/store-events.jsonlsessionDir/build-stream.jsonlsessionDir/mcp-tools.jsonlsessionDir/session.logsessionDir/prompts.md
Network endpoints2
platform.onveloz.comservice-issued presigned upload URLs (host is not present in the inspected source)
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The init wizard uploads per-session debug logs through service-issued presigned URLs.
- The upload may include prompts, SDK messages, tool calls, build stream, MCP tool records, and session logs.
- On wizard finalization, the upload runs automatically; the only visible code-level opt-out is VELOZ_NO_TELEMETRY=1.
- The service receives project and user identifiers including working directory, git remote, username, organization, and framework.
- Device authentication uses the configured Veloz API, which defaults to platform.onveloz.com; the Anthropic key match is only an error-message check.
Evidence against
- The upload is described as best-effort init-wizard debugging telemetry and runs as part of the user's explicit init flow.
- The code does not show the Veloz API key being sent to the unrelated hosts named by the scanner.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
Source & flagged code
5 flaggeddist/config-Bivuursk.mjsView file
10import { createInterface } from "node:readline";
L11: import { exec } from "node:child_process";
L12: import { Writable } from "node:stream";
High
Child Process
Package source references child process execution.
dist/config-Bivuursk.mjsView on unpkg · L1010import { createInterface } from "node:readline";
L11: import { exec } from "node:child_process";
L12: import { Writable } from "node:stream";
...
L15: //#region src/lib/helpers.ts
L16: /** True when the CLI is running as an MCP server (stdout = JSON-RPC transport). */
L17: function isMcpMode() {
L18: return process.env.VELOZ_MCP === "true";
L19: }
...
L31: function log(message) {
L32: if (isMcpMode()) process.stderr.write(`${message}\n`);
L33: else process.stdout.write(`${message}\n`);
...
L35: function startGroup(name) {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/config-Bivuursk.mjsView on unpkg · L10dist/index.mjsView file
14584//#region src/lib/auto-update.ts
L14585: const execAsync = promisify(exec);
L14586: /** The npm registry's `/<package>/latest` document; only the version is read. */
Findings
4 High2 Medium6 Low
HighChild Processdist/config-Bivuursk.mjs
HighShelldist/index.mjs
HighCredential Redirect Persistencedist/index.mjs
HighCross File Remote Execution Contextdist/index.mjs
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/config-Bivuursk.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to onveloz@0.0.0-beta.55.
See all versions of onveloz for other recorded verdicts.
- Review the evidence and your use of onveloz@0.0.0-beta.55 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.