wgc@0.132.0
The official CLI tool to manage the GraphQL Federation Platform Cosmo
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the flagged project-file writes belong to an explicit scaffolding command. Telemetry is identifiable product usage reporting with opt-out flags; no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
Telemetry initializes when the CLI starts; plugin files are generated only when the user invokes the plugin init command.
Impact
No confirmed malicious effect or unauthorized control-surface mutation was established.
Mechanism
Telemetry sends CLI usage events through PostHog, subject to opt-out flags. The init command scaffolds files in the selected project directory.
AI rationale
The manifest has no install lifecycle hook, and the flagged project-file writes belong to an explicit scaffolding command. Telemetry is identifiable product usage reporting with opt-out flags; no concrete attack behavior was found.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines no install lifecycle hook; its scripts are build, development, and verification commands.
- Telemetry returns when disabled by COSMO_TELEMETRY_DISABLED or DO_NOT_TRACK and otherwise uses PostHog, with a configurable host.
- Telemetry events use the authenticated platform identity and CLI metadata; the flagged plugin init command is a user-invoked project scaffold.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
4 flaggeddist/src/core/telemetry.jsView file
9// Support for COSMO_TELEMETRY_DISABLED and Console Do Not Track standard
L10: const TELEMETRY_DISABLED = process.env.COSMO_TELEMETRY_DISABLED === 'true' || process.env.DO_NOT_TRACK === '1';
L11: const UNAUTHENTICATED_CONTEXT_METADATA = Object.freeze({ organizationId: 'anonymous' });
...
L20: // This will also make the retry mechanism ineffective.
L21: async function safePostHogFetch(url, options) {
L22: try {
...
L40: const isCI = () => {
L41: return Boolean(process.env.CI || // Travis CI, CircleCI, GitLab CI, GitHub Actions, etc.
L42: process.env.CONTINUOUS_INTEGRATION ||
...
L163: var _a;
L164: const machineId = crypto.hash('sha256', os.hostname(), 'hex');
L165: return {
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/src/core/telemetry.jsView on unpkg · L960export const initTelemetry = () => {
if (TELEMETRY_DISABLED) {
return;
}
const posthogApiKey = process.env.POSTHOG_API_KEY || 'phc_CEnvoyw3KcTuC5E1seDPrgvAamgGRDLfzPi1e7RU1G1';
const posthogHost = process.env.POSTHOG_HOST || 'https://eu.i.posthog
Low
Ai Review Evidence
Telemetry returns when disabled by COSMO_TELEMETRY_DISABLED or DO_NOT_TRACK and otherwise uses PostHog, with a configurable host.
dist/src/core/telemetry.jsView on unpkg · L60Findings
2 High3 Medium7 Low
HighSandbox Evasion Gated Capabilitydist/src/core/telemetry.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/src/commands/router/commands/plugin/commands/init.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/src/core/telemetry.js
Affected versions and remediation
This report applies to wgc@0.132.0.
See all versions of wgc for other recorded verdicts.
- Review the evidence and your use of wgc@0.132.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.