registry / wildcrane-runner / 0.6.12
wildcrane-runner@0.6.12
WildCrane's Local Runner — connects this computer to WildCrane and runs its jobs on your local Claude Code, Codex, OpenCode or Cursor.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe launcher and bundled runner perform the package’s stated job: connect to WildCrane after sign-in and run tasks through local agents. The flagged provider-key references configure those agents, and the prepare script is a build step rather than an install hook that sends data.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user runs the CLI and signs in; the runner then connects to the service and handles tasks.
Impact
Expected runner behavior; no malicious credential collection, unrelated data transfer, or unauthorized account action was found.
Mechanism
The runner sends its session token to the configured WildCrane API. Saved model keys are placed in the selected provider’s local agent environment.
AI rationale
The launcher and bundled runner perform the package’s stated job: connect to WildCrane after sign-in and run tasks through local agents. The flagged provider-key references configure those agents, and the prepare script is a build step rather than an install hook that sends data.
Evidence
package.jsonREADME.mdbin/wildcrane-runner.mjsdist/launcher.mjsdist/runner.mjsdist/akb/dist/kanban.mjs
Network endpoints4
api.ai4kanban.devyajrbpprmdvtkvjjfpbk.supabase.coregistry.npmjs.orgcursor.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The documented purpose is to connect the computer to WildCrane and run tasks through local coding agents.
- The launcher starts the runner; the README says first launch opens a browser for sign-in.
- The bundled code labels the Anthropic key as stored locally and only adds configured secrets to the selected provider’s environment.
- Cloud requests use the runner session’s bearer token; no automatic forwarding of third-party model keys to an unrelated host was identified.
- The prepare script runs a build command; no preinstall, install, or postinstall script is declared.
Evidence against
- The runner automatically checks for cloud-directed version updates and downloads versions from the configured npm registry.
- The bundled runner can execute local agents and their workflows, which is central to its documented purpose.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
10 flaggeddist/akb/dist/kanban.mjsView file
58* Constructs the CommanderError class
L59: * @param {number} exitCode suggested exit code which could be used with process.exit
L60: * @param {string} code an id string representing the error
...
L1168: var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path85 = __require("node:path");
...
L1218: this._outputConfiguration = {
L1219: writeOut: (str5) => process2.stdout.write(str5),
L1220: writeErr: (str5) => process2.stderr.write(str5),
...
L1257: * @returns {Command[]}
L1258: * @private
L1259: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/akb/dist/kanban.mjsView on unpkg · L581168var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path85 = __require("node:path");
High
Child Process
Package source references child process execution.
dist/akb/dist/kanban.mjsView on unpkg · L11682008}
L2009: const execArgv = process2.execArgv ?? [];
L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
Findings
2 Critical5 High5 Medium6 Low
CriticalCredential Exfiltrationdist/akb/dist/kanban.mjs
CriticalPrevious Version Dangerous Deltadist/launcher.mjs
HighChild Processdist/akb/dist/kanban.mjs
HighShelldist/akb/dist/kanban.mjs
HighSame File Env Network Executiondist/launcher.mjs
HighCommand Output Exfiltrationdist/akb/dist/kanban.mjs
HighKnown Malware Source Similaritydist/akb/dist/kanban.mjs
MediumDynamic Requiredist/akb/bin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/runner.mjs
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to wildcrane-runner@0.6.12.
See all versions of wildcrane-runner for other recorded verdicts.
- Review the evidence and your use of wildcrane-runner@0.6.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.