tina4-nodejs@3.13.148
Tina4 for Node.js/TypeScript - native TypeScript conventions and shared Tina4 contracts
AI Security Review
scanned 29d ago · by lpm-firewall-aiSource supports a warning for explicit-user-command agent configuration mutation and global skill installation under the supplied policy. It does not support the scanner's malicious verdict or a publication block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Run tina4nodejs ai and select tools, or supply --all.
Impact
Installed instructions can influence assistants in the project and other projects using global Claude skills. The inspected flow requires command invocation and does not establish unattended future updates.
Mechanism
Setup merges project context files and downloads Tina4 skill files into project and global Claude directories.
AI rationale
Source supports a warning for explicit-user-command agent configuration mutation and global skill installation under the supplied policy. It does not support the scanner's malicious verdict or a publication block.
Evidence
packages/cli/dist/bin.jspackages/core/src/ai.tsCLAUDE.mdAGENTS.md.claude/skills
Network endpoints1
raw.githubusercontent.com
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The published CLI's ai command invokes setup through an interactive selection or explicit --all flag.
- AI setup writes project agent context files and installs skills into both project and global Claude skill directories.
- Skill installation downloads Tina4 GitHub content and writes the downloaded bytes to skill destinations.
- The manifest defines build-only prepare and prepublishOnly hooks, with no preinstall, install, or postinstall hook.
Evidence against
- The inspected agent configuration locations in the core, CLI, and ORM bundles enumerate project documentation for reading.
- No covert credential export or automatic install-time agent takeover was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
24 flaggedpackages/core/dist/index.jsView file
54function warnEnv(message) {
L55: process.stderr.write(`[tina4] ${message}
L56: `);
...
L59: return value.replace(REFERENCE, (whole, name) => {
L60: const resolved = process.env[name] ?? parsed[name];
L61: if (resolved !== void 0) return resolved;
...
L250: try {
L251: return new TextDecoder("utf-8", { fatal: true }).decode(buf);
L252: } catch {
...
L509: }
L510: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L511: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
packages/core/dist/index.jsView on unpkg · L5454Trigger-reachable chain: manifest.main -> packages/core/dist/index.js
L54: function warnEnv(message) {
L55: process.stderr.write(`[tina4] ${message}
L56: `);
...
L59: return value.replace(REFERENCE, (whole, name) => {
L60: const resolved = process.env[name] ?? parsed[name];
L61: if (resolved !== void 0) return resolved;
...
L250: try {
L251: return new TextDecoder("utf-8", { fatal: true }).decode(buf);
L252: } catch {
...
L509: }
L510: const logDir = (isAbsolute(dirCandidate) ? dirCandidate : join2(process.cwd(), dirCandidate)).replace(/\/$/, "");
L511: if (!fileCandidate) return { logDir, logFile: null, layout: "directory" };
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
Findings
2 Critical9 High16 Medium7 Low
CriticalCredential Exfiltrationpackages/core/dist/index.js
CriticalTrigger Reachable Dangerous Capabilitypackages/core/dist/index.js
HighChild Processpackages/core/dist/index.js
HighShell
HighCredential Redirect Persistencepackages/core/dist/index.js
HighCommand Output Exfiltrationpackages/core/dist/index.js
HighSandbox Evasion Gated Capabilitypackages/core/src/metrics.ts
HighCross File Remote Execution Contextpackages/cli/dist/bin.js
HighTrigger Reachable Credential Exfiltrationpackages/core/dist/index.js
HighRuntime Package Installpackages/core/src/devAdmin.ts
HighSemantic Analysis Limitedpackages/cli/src/bin.ts#virtual:normalized:round1
Affected versions and remediation
This report applies to tina4-nodejs@3.13.148.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.148 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.