shakers-cli@0.21.1
Shakers AI usage & skills evaluator: a local-first CLI (`shakers` binary) plus a local MCP server. Commands: ai-usage (scan + classify your AI-tool setup, T0-T7), certify (certify Skills from your code), share (branded LinkedIn card).
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe CLI sends identifying machine details and command metadata to the publisher's service automatically, without a clearly disclosed consent step. The telemetry is related to the package's purpose, so this warrants a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Runs automatically when the CLI starts.
Impact
The publisher receives identifying machine information and command metadata without an explicit per-run request.
Mechanism
A detached worker posts command metadata to the Shakers certifications API. Without a saved session token, the payload includes the OS username and hostname.
AI rationale
The CLI sends identifying machine details and command metadata to the publisher's service automatically, without a clearly disclosed consent step. The telemetry is related to the package's purpose, so this warrants a warning rather than a malicious verdict.
Evidence
bin/shakers.js
Network endpoints1
api.certifications.shakersworks.com/api/v1/cli/command-log
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest exposes bin/shakers.js as the CLI executable and declares no lifecycle scripts.
- Each normal CLI startup starts a detached command-audit worker.
- The audit sends the command, scrubbed arguments, CLI version, and timestamp; without a saved session token, it also includes the OS username and hostname.
- The audit posts to /cli/command-log under the default Shakers certifications API host.
Evidence against
- The package is an AI usage assessment CLI and MCP server, so sending limited command audit data to its own service is related to its purpose.
- Command arguments are passed through secret scrubbing and capped at 200 characters.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
12 flaggedbin/shakers.jsView file
35"use strict";
L36: var import_child_process = require("child_process");
L37: function langFromLocaleString(raw) {
High
17441return {
L17442: linkedin: uniq((t.match(/(?:https?:\/\/)?(?:[a-z]{2,3}\.)?linkedin\.com\/in\/[A-Za-z0-9_%-]+/gi) || []).map((u) => `https://www.${u.replace(/^https?:\/\//i, "").replace(/^(?:[a-z]{...
L17443: github: uniq((t.match(/(?:https?:\/\/)?github\.com\/[A-Za-z0-9-]+/gi) || []).map((u) => `https://${u.replace(/^https?:\/\//i, "")}`)),
...
L17447: }
L17448: function readCvText(input, { platform = process.platform, exec = import_child_process.execFileSync, env = process.env, talentName = null } = {}) {
L17449: const file = (0, import_env_paths.expandHome)(input, env);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/shakers.jsView on unpkg · L17441•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/shakers.js:
{ type: "projectPath", path: ".claude" },
{ type: "homePath", path: ".claude" },
{ type: "vscodeExt", prefix: "saoudrizwan.claude-dev" }
{ type: "homePath", path: ".codex" },
return env.CODEX_HOME || require("path").join(getHomeDir(env), ".codex");
function writeFilePreservingMode(dest, buf, mode, overwrite) {
if (writeFilePreservingMode(dest, buf, st.mode & 511, isConfig)) brought.push(name);
fs.writeFileSync(marker, `${(/* @__PURE__ */ new Date()).toISOString()}
Findings
10 High3 Medium5 Low
HighChild Processbin/shakers.js
HighSame File Env Network Executionbin/shakers.js
HighCredential Redirect Persistencebin/shakers.js
HighCross File Remote Execution Contextbin/mcpb.js
HighKnown Malware Source Similaritybin/mcp.js
HighKnown Malware Source Similaritybin/mcpb.js
HighKnown Malware Source Similaritybin/shakers.js
HighKnown Malware Source Similaritybin/update-check-worker.js
HighKnown Malware Source Similaritybin/command-audit-worker.js
HighKnown Malware Source Fingerprint Signaturebin/mcp.js
MediumDynamic Requirebin/shakers.js
MediumNetwork
Affected versions and remediation
This report applies to shakers-cli@0.21.1.
See all versions of shakers-cli for other recorded verdicts.
- Review the evidence and your use of shakers-cli@0.21.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.