registry / terminal-smart-cli / 0.98.0
terminal-smart-cli@0.98.0
Terminal Smart no seu terminal — pergunte, analise logs por pipe e orquestre agentes de IA. Comando: ts
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged password handling extracts demo credentials from a project being tested and submits them to that project’s local app. The package has no install hook, and the reviewed credential flows show no unrelated fixed destination.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI commands, including login, provider setup, and the meta workflow.
Impact
The reviewed behavior is consistent with the CLI’s stated purpose; no unauthorized credential collection or unrelated exfiltration was found.
Mechanism
Session credentials go to the configured Terminal Smart API; user-entered provider keys go to the selected provider. The browser gate reads seed credentials from the target project and submits them to its local app.
AI rationale
The flagged password handling extracts demo credentials from a project being tested and submits them to that project’s local app. The package has no install hook, and the reviewed credential flows show no unrelated fixed destination.
Evidence
~/.ts/config.jsontarget project seed files
Network endpoints2
terminalsmart.com.brlocalhost:<selected-port>
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI binary and declares no install lifecycle hook.
- Login pairs with the Terminal Smart backend and stores the returned session token.
- Custom provider credentials are entered by the user alongside the provider base URL.
- The browser test reads demo credentials from the target project’s seed files and uses them to test that project’s local app.
- The local browser test gate is called within the meta workflow.
Evidence against
- The CLI’s default API base is terminalsmart.com.br; the reviewed credential paths do not show credentials being redirected to an unrelated fixed host.
- The flagged password-field handling is part of testing a local project’s seeded login, not collecting browser-stored credentials.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbin/ts.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = terminal-smart-cli@0.97.12
matchedIdentity = npm:dGVybWluYWwtc21hcnQtY2xp:0.97.12
similarity = 0.444
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/ts.jsView on unpkg13if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
L15: }
High
11L12: // Windows legado (cmd.exe): força UTF-8 pro desenho das caixas não virar "?".
L13: if (process.platform === 'win32' && process.stdout.isTTY) {
High
Findings
3 Critical6 High3 Medium6 Low
CriticalBrowser Credential Phishinglib/meta.js
CriticalTrigger Reachable Dangerous Capabilitylib/meta.js
CriticalPrevious Version Dangerous Deltabin/ts.js
HighChild Processbin/ts.js
HighShellbin/ts.js
HighSame File Env Network Executionlib/meta.js
HighCredential Redirect Persistencebin/ts.js
HighSandbox Evasion Gated Capabilitybin/ts.js
HighSemantic Analysis Limitedlib/conhecimento.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to terminal-smart-cli@0.98.0.
See all versions of terminal-smart-cli for other recorded verdicts.
- Review the evidence and your use of terminal-smart-cli@0.98.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.