prismic@1.12.0
Prismic's official command line tool
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe static signals map to normal functionality of the official Prismic CLI, activated through explicit user commands. Source inspection found no malicious install-time behavior, stealth persistence, agent-control mutation, or unauthorized credential/file exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the prismic CLI and its selected commands.
Impact
User-directed project and Prismic repository changes only; no install-time execution, foreign agent-control writes, or concrete exfiltration chain found.
Mechanism
Authenticated Prismic API requests, local project generation/synchronization, optional telemetry and update checks.
AI rationale
The static signals map to normal functionality of the official Prismic CLI, activated through explicit user commands. Source inspection found no malicious install-time behavior, stealth persistence, agent-control mutation, or unauthorized credential/file exfiltration.
Evidence
package.jsondist/index.mjsdist/auth-D6IgYWE1.mjsdist/segment-Chy6nhWJ.mjsdist/request-tDz-x1rd.mjsdist/update-notifier-DY5EVKTv.mjsprismic.config.jsonslicemachine.config.json
Network endpoints4
auth.${host}/user-service.${host}/api.segment.io/v1/trackapi.segment.io/v1/identify
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has only a prepare build hook; no preinstall/install/postinstall hook.
- dist/index.mjs is an explicit prismic CLI entrypoint with user-invoked repository/model commands.
- dist/auth-D6IgYWE1.mjs stores Prismic credentials locally and refreshes them only for CLI authentication.
- dist/segment-Chy6nhWJ.mjs sends CLI telemetry to Segment; no credential/file-harvesting flow found.
- AI-agent environment detection in dist/index.mjs is sent as repository-creation metadata, not used to alter agent configuration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•name = prismic; similarTo = prisma
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgdist/auth-D6IgYWE1.mjsView file
1import{E as e,M as t,O as n,S as r,T as i,c as a,f as o,g as s,j as c,k as l,o as u,p as d,s as f,x as p}from"./request-tDz-x1rd.mjs";import{readFile as m,rm as h}from"node:fs/prom...
High
Child Process
Package source references child process execution.
dist/auth-D6IgYWE1.mjsView on unpkg · L11import{E as e,M as t,O as n,S as r,T as i,c as a,f as o,g as s,j as c,k as l,o as u,p as d,s as f,x as p}from"./request-tDz-x1rd.mjs";import{readFile as m,rm as h}from"node:fs/prom...
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
Findings
4 High6 Medium7 Low
HighChild Processdist/auth-D6IgYWE1.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighSandbox Evasion Gated Capabilitydist/auth-D6IgYWE1.mjs
MediumTyposquat Namepackage.json
MediumDynamic Requiredist/builders-hKD4IrLX-BD_f07bx.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowObfuscated
Affected versions and remediation
This report applies to prismic@1.12.0.
See all versions of prismic for other recorded verdicts.
- Review the evidence and your use of prismic@1.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.