registry / tokenusage-cli / 0.2.5
tokenusage-cli@0.2.5
Self-hosted AI coding token usage collector for the Token Usage dashboard.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package has no install-time hook, and the flagged scheduled-task and agent-integration setup is reached through the CLI's `init` workflow. The inspected credential flow uses Google's OAuth endpoint for Gemini usage collection, while optional Sentry reporting requires an explicitly configured DSN.
Static reason
No blocking static signals were detected.
Trigger
A user runs the CLI; integration and scheduled-task setup occurs through `init`.
Impact
No unrelated credential transfer, install-time persistence, or concealed automatic action was identified in the inspected paths.
Mechanism
The CLI collects provider usage data, uses provider-specific endpoints for provider credentials, and can configure usage-sync integrations during setup. Optional Sentry reporting requires a configured DSN and honors the telemetry opt-out.
AI rationale
The package has no install-time hook, and the flagged scheduled-task and agent-integration setup is reached through the CLI's `init` workflow. The inspected credential flow uses Google's OAuth endpoint for Gemini usage collection, while optional Sentry reporting requires an explicitly configured DSN.
Network endpoints3
oauth2.googleapis.com/tokencloudcode-pa.googleapis.com/v1internal:loadCodeAssistcloudcode-pa.googleapis.com/v1internal:retrieveUserQuota
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines only a `prepublishOnly` script, which runs tests; it has no install lifecycle hook.
- Environment integration setup is reached through the CLI's `init` command, which offers a proceed prompt in interactive use.
- The Windows hourly sync task is registered during `init` and can be skipped with `--no-task`.
- Sentry reporting is disabled unless a DSN is set and is also subject to the telemetry opt-out.
- Gemini refresh tokens are sent to Google's OAuth token endpoint as part of Gemini usage-limit collection.
Evidence against
- The package reads credentials and configures scheduled collection, integrations, and an OpenClaw session plugin; these behaviors warrant review, but the inspected paths tie them to the token-usage collector's explicit setup and supported provider integrations.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
6 flaggedbin/tokenusage.jsView file
5// ExperimentalWarning out of redirected sync logs.
L6: require('../src/lib/quiet-warnings').[redacted]();
L7:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/tokenusage.jsView on unpkg · L5src/lib/claude-categorizer.jsView file
335function defaultClaudeProjectsDir() {
L336: return path.join(os.homedir(), ".claude", "projects");
L337: }
...
L512: try {
L513: obj = JSON.parse(line);
L514: } catch (_e) {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
src/lib/claude-categorizer.jsView on unpkg · L335src/lib/scheduled-task.jsView file
Findings
3 High5 Medium6 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationsrc/lib/openclaw-hook.js
HighTrigger Reachable Persistencesrc/lib/scheduled-task.js
HighSemantic Analysis Limitedsrc/lib/qoder-limits.js#virtual:normalized:round1
MediumDynamic Requirebin/tokenusage.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencesrc/lib/scheduled-task.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptosrc/lib/claude-categorizer.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to tokenusage-cli@0.2.5.
See all versions of tokenusage-cli for other recorded verdicts.
- Review the evidence and your use of tokenusage-cli@0.2.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.