shakers-cli@0.21.0
Shakers AI usage & skills evaluator: a local-first CLI (`shakers` binary) plus a local MCP server. Commands: ai-usage (scan + classify your AI-tool setup, T0-T7), certify (certify Skills from your code), share (branded LinkedIn card).
AI Security Review
scanned 2d ago · by lpm-firewall-aiThis version is suspicious because it automatically sends command telemetry and, when unauthenticated, includes the OS username and hostname without clearly disclosing that audit collection. The data goes to Shakers’ own API, and I found no evidence of the flagged unrelated credential redirection or install-time attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Each CLI invocation, unless SHAKERS_CLI_NO_AUDIT=1 is set.
Impact
The vendor receives command activity and, for unauthenticated runs, identifying details about the local user and machine without a disclosed command-audit notice.
Mechanism
A detached worker POSTs the command name, scrubbed arguments, CLI version, and timestamp to the configured certification API. Without a valid session, it also includes the OS username and hostname; with a session, it includes the Shakers bearer token.
AI rationale
This version is suspicious because it automatically sends command telemetry and, when unauthenticated, includes the OS username and hostname without clearly disclosing that audit collection. The data goes to Shakers’ own API, and I found no evidence of the flagged unrelated credential redirection or install-time attack.
Evidence
bin/shakers.jsbin/command-audit-worker.js
Network endpoints1
api.certifications.shakersworks.com/api/v1/cli/command-log
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI starts command auditing on each invocation by default; it can be disabled with SHAKERS_CLI_NO_AUDIT=1.
- The audit includes the command and scrubbed arguments. Without a valid session it also includes the OS username and hostname; with a session it sends a Shakers bearer token.
- The audit is POSTed to the configured certification API’s /cli/command-log route, which defaults to api.certifications.shakersworks.com.
Evidence against
- The manifest has no install, preinstall, or postinstall scripts.
- The inspected audit destination is Shakers’ own service; no fixed unrelated credential collector was found.
- The download-and-run update path is part of the explicit update command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedbin/shakers.jsView file
35"use strict";
L36: var import_child_process = require("child_process");
L37: function langFromLocaleString(raw) {
High
17441return {
L17442: linkedin: uniq((t.match(/(?:https?:\/\/)?(?:[a-z]{2,3}\.)?linkedin\.com\/in\/[A-Za-z0-9_%-]+/gi) || []).map((u) => `https://www.${u.replace(/^https?:\/\//i, "").replace(/^(?:[a-z]{...
L17443: github: uniq((t.match(/(?:https?:\/\/)?github\.com\/[A-Za-z0-9-]+/gi) || []).map((u) => `https://${u.replace(/^https?:\/\//i, "")}`)),
...
L17447: }
L17448: function readCvText(input, { platform = process.platform, exec = import_child_process.execFileSync, env = process.env, talentName = null } = {}) {
L17449: const file = (0, import_env_paths.expandHome)(input, env);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/shakers.jsView on unpkg · L17441•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/shakers.js:
{ type: "projectPath", path: ".claude" },
{ type: "homePath", path: ".claude" },
{ type: "vscodeExt", prefix: "saoudrizwan.claude-dev" }
{ type: "homePath", path: ".codex" },
return env.CODEX_HOME || require("path").join(getHomeDir(env), ".codex");
function writeFilePreservingMode(dest, buf, mode, overwrite) {
if (writeFilePreservingMode(dest, buf, st.mode & 511, isConfig)) brought.push(name);
fs.writeFileSync(marker, `${(/* @__PURE__ */ new Date()).toISOString()}
Findings
4 High3 Medium5 Low
HighChild Processbin/shakers.js
HighSame File Env Network Executionbin/shakers.js
HighCredential Redirect Persistencebin/shakers.js
HighCross File Remote Execution Contextbin/mcpb.js
MediumDynamic Requirebin/shakers.js
MediumNetwork
MediumEnvironment Vars
LowWeak Cryptobin/shakers.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to shakers-cli@0.21.0.
See all versions of shakers-cli for other recorded verdicts.
- Review the evidence and your use of shakers-cli@0.21.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.