registry / wildcrane-runner / 0.6.16
wildcrane-runner@0.6.16
WildCrane's Local Runner — connects this computer to WildCrane and runs its jobs on your local Claude Code, Codex, OpenCode or Cursor.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package describes and launches a local runner that connects to WildCrane and runs jobs through local coding agents. The credential-related code inspected configures selected providers for those local runs and filters unrelated provider-routing variables; no exfiltration or unrelated automatic execution was established.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The user starts the wildcrane-runner CLI, which launches its runner entry point to receive and run jobs.
Impact
Expected local job execution and service communication; no credential theft or unrelated command execution was established.
Mechanism
The runner connects to WildCrane and invokes local coding agents. Provider credentials are configured for the selected agent/provider; the inspected source describes filtering unrelated provider-routing settings.
AI rationale
The package describes and launches a local runner that connects to WildCrane and runs jobs through local coding agents. The credential-related code inspected configures selected providers for those local runs and filters unrelated provider-routing variables; no exfiltration or unrelated automatic execution was established.
Evidence
.wildcrane/machine.json
Network endpoints2
api.ai4kanban.devyajrbpprmdvtkvjjfpbk.supabase.co
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a local runner that connects to WildCrane and runs its jobs using local coding agents.
- The CLI starts the runner entry point, consistent with that stated purpose.
- Provider API keys are configured for the selected provider and passed to local agent runs; the source says they are not sent to the subscription service.
- The runner filters provider-routing variables so a run does not use an unselected provider endpoint.
Evidence against
- The runner executes local coding-agent jobs, so its intended operation includes launching processes and communicating with its service.
- The Cursor installer command appears in an agent adapter; the inspected excerpt does not show it running automatically.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggeddist/akb/dist/kanban.mjsView file
58* Constructs the CommanderError class
L59: * @param {number} exitCode suggested exit code which could be used with process.exit
L60: * @param {string} code an id string representing the error
...
L1168: var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path87 = __require("node:path");
...
L1218: this._outputConfiguration = {
L1219: writeOut: (str5) => process2.stdout.write(str5),
L1220: writeErr: (str5) => process2.stderr.write(str5),
...
L1257: * @returns {Command[]}
L1258: * @private
L1259: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/akb/dist/kanban.mjsView on unpkg · L581168var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path87 = __require("node:path");
High
Child Process
Package source references child process execution.
dist/akb/dist/kanban.mjsView on unpkg · L11682008}
L2009: const execArgv = process2.execArgv ?? [];
L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
Findings
1 Critical5 High5 Medium6 Low
CriticalCredential Exfiltrationdist/akb/dist/kanban.mjs
HighChild Processdist/akb/dist/kanban.mjs
HighShelldist/akb/dist/kanban.mjs
HighSame File Env Network Executiondist/launcher.mjs
HighCommand Output Exfiltrationdist/akb/dist/kanban.mjs
HighKnown Malware Source Similaritydist/akb/dist/kanban.mjs
MediumDynamic Requiredist/akb/bin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/runner.mjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to wildcrane-runner@0.6.16.
See all versions of wildcrane-runner for other recorded verdicts.
- Review the evidence and your use of wildcrane-runner@0.6.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.