registry / plani / 0.5.0

plani@0.5.0

Share beautiful HTML plans and demo links from agents and humans

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The risky primitives are part of a user-invoked CLI/MCP tool for building, uploading, and managing static shares.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs plani commands such as share, link, login, or mcp.

Impact

User-selected files may be uploaded to plani.sh; link may execute the local project's build script by user command.

Mechanism

package-aligned static-site sharing CLI with auth and optional build execution

Rationale

Static inspection shows a normal package-aligned sharing CLI: network, environment, file reads, build execution, and MCP behavior are user-invoked and explained by the product. There is no install-time execution or hidden exfiltration/persistence/control-surface mutation.

Evidence

package.jsondist/index.js~/.plani/auth.jsonuser-supplied share pathproject dist/build/out output directoriesnext.config.tsnext.config.mjsnext.config.jsapp metadata files named sitemap/robots/manifest/opengraph-image/twitter-image/icon

Network endpoints9

plani.shplani.sh/api/uploadplani.sh/api/meplani.sh/api/deploymentsplani.sh/api/checkoutplani.sh/api/subscriptionplani.sh/api/subscription/cancelplani.sh/api/preflightplani.sh/auth/github

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for block

dist/index.js reads user-selected files/directories and uploads base64 content to plani.sh when share/link/MCP tool is invoked.
dist/index.js can run '<package-manager> run build' for the link command unless --no-build is used.
dist/index.js temporarily writes Next.js config/app metadata files during link, then restores backups.

Evidence against

package.json has no install/preinstall/postinstall hook; only prepublishOnly build.
Network calls are to package-aligned https://plani.sh API endpoints for auth, upload, deployments, checkout, subscription, and preflight.
Credential access is limited to package-owned ~/.plani/auth.json for login token storage/use/logout.
No eval/vm/Function, dynamic remote code loading, native binary loading, persistence, or credential harvesting found.
MCP mode exposes package-aligned share/list/delete/version tools only after explicit 'plani mcp' runtime invocation.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 1 file(s), 23.9 KB of source, external domains: plani.sh

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import{resolve as D,basename as Qe}from"path";import{existsSync as fe,statSync as et,readFileSync as tt}from"fs";import{randomBytes as nt}from"crypto";import{createInterface as ot}from"readline";import{existsSync as f,readFileSync as X}from"fs";import{join as d}from"path";function H(t){if(f(d(t,"vite.config.ts"))||f(d(t,"vite.config.js"))||f(d(t,"vite.config.mjs")))return{name:"Vite",outputDir:"dist"};if(f(d(t,"next.config.js"))||f(d(t,"next.config.ts"))||f(d(t,"next.config.mjs")))return{name:"Next.js",outputDir:"out"};if(f(d(t,"astro.config.mjs"))||f(d(t,"astro.config.ts")))return{name:"Astro ...

3`:` Open this URL in your browser:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

5 ${l}

6`)}),setTimeout(()=>{r||(i.close(),e(new Error("Login timed out \u2014 no response within 2 minutes.")))},12e4)})}function K(){try{return I(x)?(Le(x),!0):!1}catch{return!1}}async function S(t,e={}){let n={files:t};e.ttl!==void 0&&(n.ttl=e.ttl),e.password!==void 0&&(n.password=e.password),e.name!==void 0&&(n.name=e.name),e.pin&&(n.pin=!0),e.folder!==void 0&&(n.folder=e.folder),e.badge!==void 0&&(n.badge=e.badge),e.public&&(n.public=!0);let r={"Content-Type":"application/json","X-Plani-Version":g},i=p();i&&(r.Authorization=`Bearer ${i.token}`);let o=await fetch(`${m}/api/upload`,{method:"POST",h ...

7`),e="";process.stdin.setEncoding("utf8"),process.stdin.on("data",async n=>{e+=n;let r;for(;(r=e.indexOf(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

8`))!==-1;){let i=e.slice(0,r).trim();if(e=e.slice(r+1),!i)continue;let o;try{o=JSON.parse(i)}catch{continue}if(!(o.id===void 0||o.id===null

9 output: "export",`)),/unoptimized\s*:\s*true/.test(c)||(/images\s*:\s*\{/.test(c)?c=c.replace(/(images\s*:\s*\{)/,"$1 unoptimized: true,"):c=c.replace(/((?:export\s+default|module\.exports\s*=|=)\s*\{)/,`$1

10 images: { unoptimized: true },`)),c!==l&&(e.push({path:a,original:l}),U(a,c),n=!0);break}let r=[],i=C(t,"app");return ie(i)&&le(i,e,r),{backups:e,configInjected:n,metadataPatched:r}}function le(t,e,n){let r;try{r=Ge(t,{withFileTypes:!0})}catch{return}for(let i of r){let o=C(t,i.name);if(i.isDirectory()){le(o,e,n);continue}if(!i.isFile())continue;let a=i.name.replace(/\.[^.]+$/,""),l=i.name.slice(a.length);if(!Ze.includes(l)||!Ke.includes(a))continue;let c=se(o,"utf-8");if(/export\s+const\s+dynamic\b/.test(c))continue;let y=`export const dynamic = "force-static";

11${c}`;e.push({path:o,original:c}),U(o,y),n.push(i.name)}}function ce(t){for(let{path:e,original:n}of t)U(e,n)}var u=t=>`\x1B[1m${t}\x1B[0m`,w=t=>`\x1B[32m${t}\x1B[0m`,s=t=>`\x1B[2m${t}\x1B[0m`,h=t=>`\x1B[31m${t}\x1B[0m`;function E(t){return t<1024?`${t}B`:t<1024*1024?`${(t/1024).toFixed(0)}KB`:`${(t/1024/1024).toFixed(1)}MB`}var ue=`

12 ${u("plani")} \u2014 share plans and demos

14 ${s("Usage:")}

15 plani share plan.html Share a single HTML file

16 plani share ./dist Share a folder of static files

17 plani share plan.html --name roadmap Named link: roadmap.plani.sh

18 plani link Build the current project and share it

19 plani link --no-build Share a pre-built project (skip build)

21 ${s("Commands:")}

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

dist/index.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1#!/usr/bin/env node L2: import{resolve as D,basename as Qe}from"path";import{existsSync as fe,statSync as et,readFileSync as tt}from"fs";import{randomBytes as nt}from"crypto";import{createInterface as ot}... L3: `:` Open this URL in your browser: ... L5: ${l} L6: `)}),setTimeout(()=>{r||(i.close(),e(new Error("Login timed out \u2014 no response within 2 minutes.")))},12e4)})}function K(){try{return I(x)?(Le(x),!0):!1}catch{return!1}}async f... L7: `),e="";process.stdin.setEncoding("utf8"),process.stdin.on("data",async n=>{e+=n;let r;for(;(r=e.indexOf(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

Findings

2 High2 Medium5 Low

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

3`:` Open this URL in your browser:

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

5 ${l}

7`),e="";process.stdin.setEncoding("utf8"),process.stdin.on("data",async n=>{e+=n;let r;for(;(r=e.indexOf(`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

8`))!==-1;){let i=e.slice(0,r).trim();if(e=e.slice(r+1),!i)continue;let o;try{o=JSON.parse(i)}catch{continue}if(!(o.id===void 0||o.id===null

12 ${u("plani")} \u2014 share plans and demos

14 ${s("Usage:")}

15 plani share plan.html Share a single HTML file

16 plani share ./dist Share a folder of static files

17 plani share plan.html --name roadmap Named link: roadmap.plani.sh

18 plani link Build the current project and share it

19 plani link --no-build Share a pre-built project (skip build)

21 ${s("Commands:")}

Long lines were clipped for display.