registry / wildcrane-runner / 0.6.18
wildcrane-runner@0.6.18
Use 0.6.19 or later; includes merged execution fixes.
WildCrane's Local Runner — connects this computer to WildCrane and runs its jobs on your local Claude Code, Codex, OpenCode or Cursor.
AI Security Review
scanned 23h ago · by lpm-firewall-aiThe install hook only builds the package, and the CLI launches a local runner intended to connect to WildCrane. The reviewed credential handling is tied to sign-in or configured agent providers, with no evidence of unrelated collection or a fixed malicious redirect.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The prepare hook builds the package; runtime behavior starts when the user invokes the CLI.
Impact
No unrelated credential collection, unauthorized account actions, or harmful execution was identified in the reviewed paths.
Mechanism
The launcher connects to WildCrane’s cloud service, supports browser sign-in, and passes configured provider credentials to the selected agent endpoint.
AI rationale
The install hook only builds the package, and the CLI launches a local runner intended to connect to WildCrane. The reviewed credential handling is tied to sign-in or configured agent providers, with no evidence of unrelated collection or a fixed malicious redirect.
Evidence
~/.wildcrane/machine.json~/.wildcrane session and settings files
Network endpoints2
api.ai4kanban.devyajrbpprmdvtkvjjfpbk.supabase.co
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The prepare hook only runs the package build script.
- The CLI entry point imports the launcher, which starts the runner or opens settings when explicitly requested.
- The launcher uses WildCrane’s configured cloud and Supabase endpoints for runner and sign-in functions.
- Provider keys are configured for the selected agent endpoint and passed under that provider’s expected environment variable.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
13 flaggeddist/akb/dist/kanban.mjsView file
58* Constructs the CommanderError class
L59: * @param {number} exitCode suggested exit code which could be used with process.exit
L60: * @param {string} code an id string representing the error
...
L1168: var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path86 = __require("node:path");
...
L1218: this._outputConfiguration = {
L1219: writeOut: (str5) => process2.stdout.write(str5),
L1220: writeErr: (str5) => process2.stderr.write(str5),
...
L1257: * @returns {Command[]}
L1258: * @private
L1259: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/akb/dist/kanban.mjsView on unpkg · L581168var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path86 = __require("node:path");
High
Child Process
Package source references child process execution.
dist/akb/dist/kanban.mjsView on unpkg · L11682008}
L2009: const execArgv = process2.execArgv ?? [];
L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
Findings
2 Critical8 High5 Medium6 Low
CriticalCredential Exfiltrationdist/akb/dist/kanban.mjs
CriticalPrevious Version Dangerous Deltadist/launcher.mjs
HighChild Processdist/akb/dist/kanban.mjs
HighShelldist/akb/dist/kanban.mjs
HighSame File Env Network Executiondist/launcher.mjs
HighCredential Redirect Persistencedist/launcher.mjs
HighCommand Output Exfiltrationdist/akb/dist/kanban.mjs
HighSandbox Evasion Gated Capabilitydist/launcher.mjs
HighCross File Remote Execution Contextdist/launcher.mjs
HighKnown Malware Source Similaritydist/akb/dist/kanban.mjs
MediumDynamic Requiredist/akb/bin/ai4kanban.mjs
Affected versions and remediation
This report applies to wildcrane-runner@0.6.18.
See all versions of wildcrane-runner for other recorded verdicts.
- Review the evidence and your use of wildcrane-runner@0.6.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.