prismic@1.13.0
Prismic's official command line tool
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe flagged primitives implement an explicit vendor CLI: login, repository management, update checks, and telemetry. Source inspection found no malicious lifecycle behavior, covert credential theft, remote payload execution, or AI-agent control-surface mutation.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs the prismic CLI.
Impact
Can modify user-selected project/Prismic resources through explicit commands; no unconsented persistence or foreign agent-control mutation found.
Mechanism
Prismic management CLI with opt-out telemetry and token refresh.
AI rationale
The flagged primitives implement an explicit vendor CLI: login, repository management, update checks, and telemetry. Source inspection found no malicious lifecycle behavior, covert credential theft, remote payload execution, or AI-agent control-surface mutation.
Evidence
package.jsondist/index.mjsdist/auth-C3-3mBIR.mjsdist/segment-CYA7QtOz.mjsdist/update-notifier-bz-r6ZLF.mjs~/.config/prismic/credentials.json~/.config/prismic/update-notifier.json~/.prismic
Network endpoints4
api.segment.io/v1/trackapi.segment.io/v1/identifyauth.${host}/customtypes.${host}/
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- dist/index.mjs detects AI-agent environment markers and includes agent/argv in CLI telemetry.
- dist/segment-CYA7QtOz.mjs posts telemetry to api.segment.io when the CLI runs.
Evidence against
- package.json has only prepare; no preinstall/install/postinstall hook.
- dist/index.mjs is a user-invoked CLI entrypoint, not import-time execution.
- Auth, repository sync, and file changes are tied to explicit CLI commands.
- No eval/vm payload loading, credential harvesting, or AI-agent config writes found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•name = prismic; similarTo = prisma
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgdist/builders-hKD4IrLX-CRl2dnPu.mjsView file
1import{F as e,P as t}from"./core-Dw_6KGNJ.mjs";import{promises as n}from"node:fs";var r=e(t((e=>{Object.defineProperty(e,`__esModule`,{value:!0});function t(e,t){if(e==null)return{...
L2: `:`\r
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/builders-hKD4IrLX-CRl2dnPu.mjsView on unpkg · L1dist/index.mjsView file
1#!/usr/bin/env node
L2: import{A as e,C as t,D as n,M as r,N as i,O as a,S as o,T as s,_ as c,a as l,b as u,d,f,h as p,i as m,j as h,k as g,l as _,m as v,n as y,o as b,p as x,r as ee,s as te,t as S,u as C...
L3: `))c.push(e?` ${e}`:``)}c.push(``),c.push(`LEARN MORE`);let f=e.name.split(` `)[0];return c.push(` Use \`${f} <command> --help\` for more information about a command.`),c.join(`
...
L5: `))s.push(e?` ${e}`:``)}return s.push(``),s.push(`LEARN MORE`),s.push(` Use \`${t} <command> --help\` for more information about a command.`),s.join(`
L6: `)}function qe(e,t){if(t.filter(t=>t in e).length>1)throw new R(`Only one of ${t.map(e=>`--${String(e)}`).join(` or `)} can be specified.`)}function Je(e,t){if(t.filter(t=>t in e)....
L7: List available documentation pages.
...
L94: Skips
Findings
2 High6 Medium7 Low
HighSandbox Evasion Gated Capabilitydist/auth-C3-3mBIR.mjs
HighPrevious Version Dangerous Deltadist/auth-C3-3mBIR.mjs
MediumTyposquat Namepackage.json
MediumDynamic Requiredist/builders-hKD4IrLX-CRl2dnPu.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.mjs
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to prismic@1.13.0.
See all versions of prismic for other recorded verdicts.
- Review the evidence and your use of prismic@1.13.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.