vibe-tutor@2.4.2
AI 编程方法论导师 - 基于 14 步 Vibe Coding 方法论
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package sends runtime telemetry to its own service, but the events include identifying project details such as project names and edited file paths. This is suspicious telemetry; the reviewed flows do not show credential theft or code-content exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
Automatically at session start and after code edits when the package hooks are installed; telemetry sends only for Pro accounts.
Impact
The package service receives local project names and file paths, plus project identifiers and limited usage details, without a telemetry consent prompt or opt-out found in the reviewed code.
Mechanism
The hooks derive a project ID from the local path, read project name and methodology state, and queue event data including edited file paths for upload with the license token.
AI rationale
The package sends runtime telemetry to its own service, but the events include identifying project details such as project names and edited file paths. This is suspicious telemetry; the reviewed flows do not show credential theft or code-content exfiltration.
Evidence
plugin/hooks/hooks.jsonplugin/hooks/scripts/session-start.cjsplugin/hooks/scripts/post-tool.cjsplugin/hooks/scripts/telemetry.cjs.vibe/config.yaml.vibe/state.json~/.vibe-tutor/cache/events/<account-hash>/*.json
Network endpoints1
vibetutor.waytomaster.com/api/telemetry/submit
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Installed hooks run session-start and PostToolUse handlers automatically.
- The session-start handler records a project ID, IDE, and license tier.
- Telemetry derives the project ID from the local project path and reads the project name and methodology step from local files.
- After code edits, the PostToolUse handler sends the edited file path with the tool and IDE.
- Telemetry batches events and uploads them with the license bearer token to the telemetry endpoint.
Evidence against
- Telemetry is gated to Pro accounts and uses the package’s own service endpoint.
- The reviewed post-tool telemetry sends file paths and limited test command names; it does not send code contents or captured command output.
- No install lifecycle scripts or unrelated credential destination were identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
9 flaggedplugin/hooks/scripts/session-start.cjsView file
1#!/usr/bin/env node
L2: const fs=require("fs"),path=require("path"),os=require("os"),crypto=require("crypto"),https=require("https"),http=require("http"),{spawn:spawn}=require("child_process"),{isPro:isPr...
High
Child Process
Package source references child process execution.
plugin/hooks/scripts/session-start.cjsView on unpkg · L11#!/usr/bin/env node
L2: const fs=require("fs"),path=require("path"),os=require("os"),crypto=require("crypto"),https=require("https"),http=require("http"),{spawn:spawn}=require("child_process"),{isPro:isPr...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
plugin/hooks/scripts/session-start.cjsView on unpkg · L11#!/usr/bin/env node
L2: const fs=require("fs"),path=require("path"),os=require("os"),crypto=require("crypto"),https=require("https"),http=require("http"),{spawn:spawn}=require("child_process"),{isPro:isPr...
High
Findings
8 High4 Medium5 Low
HighChild Processplugin/hooks/scripts/session-start.cjs
HighShell
HighSame File Env Network Executionplugin/hooks/scripts/session-start.cjs
HighCredential Exfiltrationplugin/hooks/scripts/session-start.cjs
HighCommand Output Exfiltrationcli/cli.js
HighExternal Ai Agent Control Surface Mutationcli/cli.js
HighTrigger Reachable Command Output Exfiltrationcli/cli.js
HighSemantic Analysis Limitedcli/installer.js#virtual:string-array:round1
MediumDynamic Requireplugin/hooks/scripts/qwen-launcher.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to vibe-tutor@2.4.2.
See all versions of vibe-tutor for other recorded verdicts.
- Review the evidence and your use of vibe-tutor@2.4.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.