registry / terminal-smart-cli / 0.97.69
terminal-smart-cli@0.97.69
Terminal Smart no seu terminal — pergunte, analise logs por pipe e orquestre agentes de IA. Comando: ts
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install hook, and the credential alert resolves to a project web-app test gate that uses seed credentials with a local app. The inspected API and provider key flows use the CLI service or a user-configured provider; I found no support for the scanner's alleged unofficial credential redirect.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; the web test gate is part of the explicit `meta` workflow.
Impact
The inspected behavior matches the CLI's stated purpose; no credential theft or unrelated collection was found.
Mechanism
The API uses the CLI service or a configured provider. The web gate tests a local project app and may enter that project's seed credentials into its login form.
AI rationale
The manifest has no install hook, and the credential alert resolves to a project web-app test gate that uses seed credentials with a local app. The inspected API and provider key flows use the CLI service or a user-configured provider; I found no support for the scanner's alleged unofficial credential redirect.
Network endpoints3
terminalsmart.com.brlocalhost127.0.0.1
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI command and has no install lifecycle hook; its only script is a test script.
- The API client defaults to terminalsmart.com.br and sends the session token to that API.
- The keyring uses a configured provider key and base URL, or obtains a key through the CLI's cloud API.
- The web test gate searches the selected project for seed credentials and fills them only when its local app displays a login form.
- The gate is invoked through the explicit `meta` command, which uses the selected project directory.
Evidence against
- The scanner's browser credential alert is consistent with testing a project's demo login, not collecting saved browser credentials.
- The fixed unofficial gateway and credential redirection claims were not supported by the inspected credential paths.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
9 flaggedbin/ts.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = terminal-smart-cli@0.97.12
matchedIdentity = npm:dGVybWluYWwtc21hcnQtY2xp:0.97.12
similarity = 0.444
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/ts.jsView on unpkg13if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
L15: }
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/ts.js:
// no REPL, reusa o readline do REPL (askFn) — criar um novo com ui.ask ESTRAGA o do REPL (teclado morre).
// askFn: quando vem do REPL, é o readline DELE — usar ui.ask novo aqui estragaria o teclado do REPL.
fs.writeFileSync(file, JSON.stringify(data, null, 2), { encoding: 'utf8', mode: 0o600 });
`Claude: ${state.claude ? 'conectado' : 'não conectado'}`,
'', C.dim(en ? 'Open the official page and finish authorization.' : 'Abra a página oficial e conclua a autorização.'),
fs.writeFileSync(partial, bytes, { flag: 'wx' });
fs.writeFileSync(partial, bytes, { flag: 'wx' });
try { fs.writeFileSync(out, html, 'utf8'); } catch (e)
Findings
3 Critical5 High3 Medium6 Low
CriticalBrowser Credential Phishinglib/meta.js
CriticalTrigger Reachable Dangerous Capabilitylib/meta.js
CriticalPrevious Version Dangerous Deltabin/ts.js
HighChild Processbin/ts.js
HighSame File Env Network Executionlib/meta.js
HighCredential Redirect Persistencebin/ts.js
HighSandbox Evasion Gated Capabilitybin/ts.js
HighSemantic Analysis Limitedlib/conhecimento.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptobin/ts.js
Affected versions and remediation
This report applies to terminal-smart-cli@0.97.69.
See all versions of terminal-smart-cli for other recorded verdicts.
- Review the evidence and your use of terminal-smart-cli@0.97.69 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.