registry / terminal-smart-cli / 0.97.68
terminal-smart-cli@0.97.68
Terminal Smart no seu terminal — pergunte, analise logs por pipe e orquestre agentes de IA. Comando: ts
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install hook, and the CLI's network and credential flows are tied to user-invoked features and the package service or a user-configured AI provider. The scanner's browser-credential and unofficial-gateway claims were not substantiated in the reviewed source.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User invokes a `ts` command; AI and visual-check requests occur within those features.
Impact
No malicious impact identified in the reviewed paths.
Mechanism
The CLI calls its configured Terminal Smart backend or, when BYOK is configured, the selected provider. The reviewed source did not substantiate browser credential theft or hidden redirection.
AI rationale
The manifest has no install hook, and the CLI's network and credential flows are tied to user-invoked features and the package service or a user-configured AI provider. The scanner's browser-credential and unofficial-gateway claims were not substantiated in the reviewed source.
Evidence
~/.ts/config.json~/.ts/providers.json
Network endpoints8
terminalsmart.com.brintegrate.api.nvidia.comgenerativelanguage.googleapis.comapi.cerebras.aiapi.groq.comopenrouter.ailocalhost:11434user-configured provider base URL
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a user-invoked `ts` CLI and declares no install lifecycle scripts.
- The CLI dispatches explicit commands such as login, chat, agent, and video; an empty invocation shows help without a saved token.
- The keyring uses a configured provider key and base URL when BYOK is active; otherwise it retrieves the package service key through the API.
- The vision helper sends prompts and images to the resolved AI endpoint as part of its visual-check feature.
- The default backend URL is the package's documented service, `https://terminalsmart.com.br`.
- No source evidence reviewed showed browser credential collection or a fixed unofficial credential redirect.
Evidence against
- The CLI has process execution, filesystem, and network capabilities, including project analysis and browser-based visual checks.
- A configured BYOK key is sent to the corresponding configured provider endpoint when the user invokes AI features.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
9 flaggedbin/ts.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = terminal-smart-cli@0.97.12
matchedIdentity = npm:dGVybWluYWwtc21hcnQtY2xp:0.97.12
similarity = 0.444
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/ts.jsView on unpkg13if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
L15: }
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/ts.js:
// no REPL, reusa o readline do REPL (askFn) — criar um novo com ui.ask ESTRAGA o do REPL (teclado morre).
// askFn: quando vem do REPL, é o readline DELE — usar ui.ask novo aqui estragaria o teclado do REPL.
fs.writeFileSync(file, JSON.stringify(data, null, 2), { encoding: 'utf8', mode: 0o600 });
`Claude: ${state.claude ? 'conectado' : 'não conectado'}`,
'', C.dim(en ? 'Open the official page and finish authorization.' : 'Abra a página oficial e conclua a autorização.'),
fs.writeFileSync(partial, bytes, { flag: 'wx' });
fs.writeFileSync(partial, bytes, { flag: 'wx' });
try { fs.writeFileSync(out, html, 'utf8'); } catch (e)
Findings
3 Critical5 High3 Medium6 Low
CriticalBrowser Credential Phishinglib/meta.js
CriticalTrigger Reachable Dangerous Capabilitylib/meta.js
CriticalPrevious Version Dangerous Deltabin/ts.js
HighChild Processbin/ts.js
HighSame File Env Network Executionlib/meta.js
HighCredential Redirect Persistencebin/ts.js
HighSandbox Evasion Gated Capabilitybin/ts.js
HighSemantic Analysis Limitedlib/conhecimento.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptobin/ts.js
Affected versions and remediation
This report applies to terminal-smart-cli@0.97.68.
See all versions of terminal-smart-cli for other recorded verdicts.
- Review the evidence and your use of terminal-smart-cli@0.97.68 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.