registry / wildcrane-runner / 0.6.6
wildcrane-runner@0.6.6
WildCrane's Local Runner — connects this computer to WildCrane and runs its jobs on your local Claude Code, Codex, OpenCode or Cursor.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source behavior matches a local task runner: it connects to WildCrane, updates its own runner package with an integrity check, and supplies configured provider credentials to local harnesses. The bundled anonymous usage reporting is documented and has an opt-out; no credential exfiltration or unrelated execution was identified.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The user starts the runner; updates and task handling occur during normal startup and operation.
Impact
No malicious impact identified; the observed network access and local execution serve the runner's stated purpose.
Mechanism
The launcher contacts the configured WildCrane API and npm registry. The bundled CLI uses the signed-in session for Cloud requests, supplies provider secrets to local harness environments, and can send anonymous usage batches to its telemetry endpoint.
AI rationale
The source behavior matches a local task runner: it connects to WildCrane, updates its own runner package with an integrity check, and supplies configured provider credentials to local harnesses. The bundled anonymous usage reporting is documented and has an opt-out; no credential exfiltration or unrelated execution was identified.
Network endpoints4
api.ai4kanban.devyajrbpprmdvtkvjjfpbk.supabase.coregistry.npmjs.orgt.ai4kanban.dev
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes a local runner that connects to WildCrane and runs jobs on the user's local AI coding tools.
- The launcher fetches its own package from npm and checks the tarball against the registry's SHA-512 integrity value before installation.
- Provider secrets are mapped into the selected local harness environment for a run.
- Cloud API calls use the signed-in session token with the configured WildCrane API.
- The bundled CLI describes usage reporting as anonymous, provides a telemetry off command, and sends batches to its first-party telemetry endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggeddist/akb/dist/kanban.mjsView file
58* Constructs the CommanderError class
L59: * @param {number} exitCode suggested exit code which could be used with process.exit
L60: * @param {string} code an id string representing the error
...
L1168: var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path86 = __require("node:path");
...
L1218: this._outputConfiguration = {
L1219: writeOut: (str5) => process2.stdout.write(str5),
L1220: writeErr: (str5) => process2.stderr.write(str5),
...
L1257: * @returns {Command[]}
L1258: * @private
L1259: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/akb/dist/kanban.mjsView on unpkg · L581168var EventEmitter = __require("node:events").EventEmitter;
L1169: var childProcess = __require("node:child_process");
L1170: var path86 = __require("node:path");
High
Child Process
Package source references child process execution.
dist/akb/dist/kanban.mjsView on unpkg · L11682008}
L2009: const execArgv = process2.execArgv ?? [];
L2010: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
Findings
2 Critical5 High5 Medium6 Low
CriticalCredential Exfiltrationdist/akb/dist/kanban.mjs
CriticalPrevious Version Dangerous Deltadist/launcher.mjs
HighChild Processdist/akb/dist/kanban.mjs
HighShelldist/akb/dist/kanban.mjs
HighSame File Env Network Executiondist/launcher.mjs
HighCommand Output Exfiltrationdist/akb/dist/kanban.mjs
HighKnown Malware Source Similaritydist/akb/dist/kanban.mjs
MediumDynamic Requiredist/akb/bin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/runner.mjs
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to wildcrane-runner@0.6.6.
See all versions of wildcrane-runner for other recorded verdicts.
- Review the evidence and your use of wildcrane-runner@0.6.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.