prismic@1.18.0
Prismic's official command line tool
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection shows a user-invoked Prismic CLI with no registry install hook, no self-dependency chain, and credentials used for the Prismic host stored with the session. Agent detection and telemetry are product behavior and do not write a foreign agent control surface.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the prismic command.
Impact
No unconsented credential theft, remote payload execution, persistence, or agent control-surface change was established.
Mechanism
The CLI authenticates to Prismic hosts, manages the local project, and optionally sends product telemetry. It does not run on registry install and does not mutate agent configuration.
AI rationale
Static inspection shows a user-invoked Prismic CLI with no registry install hook, no self-dependency chain, and credentials used for the Prismic host stored with the session. Agent detection and telemetry are product behavior and do not write a foreign agent control surface.
Network endpoints2
prismic.ioapi.segment.io
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes only the prismic CLI bin at dist/index.mjs, ships dist, and has a prepare build script with no preinstall, install, or postinstall hook and no runtime dependencies.
- Authentication defaults the service host to prismic.io, stores the session token in the user config directory, and refreshes it against https://auth.${host} only when the CLI runs.
- dist/index.mjs is a user-invoked Node CLI; detected agent environment variables only mark analytics options, and the package does not write agent control files.
Evidence against
- The CLI sends product telemetry to api.segment.io and a Sentry DSN, and can spawn a detached helper or a local open command, all after the user runs the CLI.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
•name = prismic; similarTo = prisma
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgdist/auth-BQ-T06tR.mjsView file
1import{A as e,B as t,E as n,L as r,N as i,P as a,R as o,T as s,b as c,c as l,g as u,h as d,j as f,o as p,s as m,y as h,z as g}from"./request-DEP7ruRD.mjs";import{readFile as _,rm a...
High
Child Process
Package source references child process execution.
dist/auth-BQ-T06tR.mjsView on unpkg · L11import{A as e,B as t,E as n,L as r,N as i,P as a,R as o,T as s,b as c,c as l,g as u,h as d,j as f,o as p,s as m,y as h,z as g}from"./request-DEP7ruRD.mjs";import{readFile as _,rm a...
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
Findings
4 High4 Medium6 Low
HighChild Processdist/auth-BQ-T06tR.mjs
HighSame File Env Network Executiondist/index.mjs
HighSandbox Evasion Gated Capabilitydist/auth-BQ-T06tR.mjs
HighPrevious Version Dangerous Deltadist/index.mjs
MediumTyposquat Namepackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/core-7gIjWHhP.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to prismic@1.18.0.
See all versions of prismic for other recorded verdicts.
- Review the evidence and your use of prismic@1.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.