registry / trackly-cli / 0.21.1
trackly-cli@0.21.1
Search 250K+ jobs across 5,400+ companies with the Trackly CLI and MCP server for Claude, ChatGPT, Codex and Cursor. Filter by role, location, salary and sponsorship; track jobs and prepare applications.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe scanner’s command execution and network findings resolve to ordinary CLI/MCP behavior and disclosed analytics sent to Trackly. I found no install-time activity, unrelated collector, or automatic account action.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user or agent starts `trackly mcp`.
Impact
Usage analytics are collected for service improvement. The README describes the collection and exclusions, and no unrelated credential or command-output exfiltration was identified.
Mechanism
The server instruments MCP tool events and relays permitted analytics through the Trackly base URL; account settings and environment variables provide opt-outs.
AI rationale
The scanner’s command execution and network findings resolve to ordinary CLI/MCP behavior and disclosed analytics sent to Trackly. I found no install-time activity, unrelated collector, or automatic account action.
Evidence
~/.trackly/config.json
Network endpoints3
closeai.mba/api/jobscout/mcp-analyticscloseai.mba/api/jobscout/mcp-analytics/anonymouscloseai.mba/api/jobscout/analytics-preference
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest defines no install, preinstall, or postinstall lifecycle hook.
- The CLI runs its main function only when executed as the entry script.
- README documents that MCP analytics are enabled by default, describes what they exclude, and explains how to disable collection.
- MCP analytics send runtime metadata such as package version, Node version, OS, and architecture.
- Analytics relay through the configured Trackly service; unauthenticated capture is limited to a defined set of event types.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedscripts/verify-audit-exceptions.jsView file
6const path = require('node:path');
L7: const { spawnSync } = require('node:child_process');
L8:
High
Child Process
Package source references child process execution.
scripts/verify-audit-exceptions.jsView on unpkg · L6bin/trackly#virtual:normalized:round1View file
18const { color, isJSON, jobDateDetailLines, outputJobs, outputCompanies, outputStats, outputContacts, outputReferralCampaign, outputNetworkBrief, outputCompanyBrief, outputCompanyWo...
L19: const http = require("http");
L20: const crypto = require("crypto");
L21: const { spawnSync } = require("child_process");
L22: const { version: VERSION } = require("../package.json");
L23: const { doctorAgent, resumeValidationStatus, setupAgent } = require("../lib/agent");
...
L223:
L224: function failNow(message, exitCode = 1) {
L225: outputError(message);
...
L311: // Flags deprecated in the API-docs-plan fixup. Still accepted by parseArgs so old
L312: // scripts don"t ERR_NOT_FOUND, but cmdJobs hard-rejects them with a migration hint\n// — silent no-op would be worse than noise (per PR #13 Codex
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltabin/trackly
HighChild Processscripts/verify-audit-exceptions.js
HighCommand Output Exfiltrationbin/trackly#virtual:normalized:round1
HighSemantic Analysis Limitedbin/trackly#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/trackly
Affected versions and remediation
This report applies to trackly-cli@0.21.1.
See all versions of trackly-cli for other recorded verdicts.
- Review the evidence and your use of trackly-cli@0.21.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.