wgc@0.130.3
The official CLI tool to manage the GraphQL Federation Platform Cosmo
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has a real but user-invoked AI-editor configuration capability. Its lack of lifecycle hooks and absence of a concrete malicious chain support a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs wgc router plugin init.
Impact
The generated rule can influence an AI editor when it processes matching plugin source files.
Mechanism
Scaffolds a Cursor instruction file alongside a router plugin.
AI rationale
The package has a real but user-invoked AI-editor configuration capability. Its lack of lifecycle hooks and absence of a concrete malicious chain support a warning rather than a block.
Evidence
dist/src/commands/router/commands/plugin/commands/init.js./<project>/plugins/<name>/.cursor/rules/plugin-development.mdc
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The explicit plugin-init command creates a Cursor rules directory and writes a rule file into the generated project.
Evidence against
- package.json has no npm install lifecycle hook.
- The Cursor rule is created only when the user runs the scaffolding command.
- Authentication requests use an OAuth device flow; Docker commands are part of an explicit plugin-publish operation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
7 flaggeddist/src/core/plugin-publish.jsView file
7import { splitLabel } from '@wundergraph/cosmo-shared';
L8: import { execa } from 'execa';
L9: import { config, getBaseHeaders } from './config.js';
High
dist/src/commands/router/commands/plugin/templates/typescript.jsView file
4const dockerfile = 'FROM --platform=$BUILDPLATFORM oven/bun:1.3.0-alpine AS builder\n\n# Multi-platform build arguments\nARG TARGETOS\nARG TARGETARCH\n\nWORKDIR /build\n\n# Copy pa...
L5: const cursorRules = "---\ndescription: {name} Plugin Guide\nglobs: src/**\nalwaysApply: false\n---\n\n# {name} Plugin Development Guide\n\nYou are an expert in developing Cosmo Rou...
L6: const debugBuild = '#!/bin/sh\nDIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)\n\nWG_BUN_DEBUG="true" exec bun --inspect run "$DIR/../src/plugin.ts" "$@" 2>>"$DIR/plugin_stderr.lo...
L7: const grpcHealthCheckFilePatch = "diff --git a/build/src/health.js b/build/src/health.js\nindex [redacted]..[redacted] 1...
L8: const packageJson = '{\n "name": "plugin-bun",\n "version": "1.0.0",\n "description": "gRPC Plugin us
High
Findings
6 High4 Medium6 Low
HighChild Process
HighShelldist/src/core/plugin-publish.js
HighSame File Env Network Executiondist/src/commands/router/commands/plugin/templates/typescript.js
HighSandbox Evasion Gated Capabilitydist/src/core/telemetry.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/src/commands/router/commands/plugin/commands/init.js
HighSemantic Analysis Limiteddist/package.json
MediumDynamic Requiredist/src/commands/router/commands/plugin/templates/typescript.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/src/commands/router/commands/plugin/templates/typescript.js
Affected versions and remediation
This report applies to wgc@0.130.3.
See all versions of wgc for other recorded verdicts.
- Review the evidence and your use of wgc@0.130.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.