wildcrane@0.11.17
WildCrane's `akb` command — scaffold the Markdown board under docs/kanban/, put an agent on a card, and carry the flows the agent works by.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe bundle implements a CLI for managing agent runs, and the flagged credential references pass configured keys to the selected agent harness. Its default usage reporting is documented, limited to usage and aggregate fields, and can be disabled.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Usage reports may be queued when the CLI runs; agent credentials are used when a configured agent run is started.
Impact
No unrelated credential collection, exfiltration, or automatic harmful action was identified.
Mechanism
The CLI sends limited usage events to its own endpoint and supplies selected provider credentials to the configured agent harness.
AI rationale
The bundle implements a CLI for managing agent runs, and the flagged credential references pass configured keys to the selected agent harness. Its default usage reporting is documented, limited to usage and aggregate fields, and can be disabled.
Network endpoints2
t.ai4kanban.devapi.ai4kanban.dev
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI; its prepare and prepublishOnly scripts run a build script.
- The bundle sends usage batches to the package's own telemetry endpoint.
- Telemetry fields are limited to usage events and aggregate details such as platform, harness, model category, cost, and board counts.
- The CLI documents that reporting is on by default and provides a telemetry off command.
- Provider credentials are read from local settings and passed to the selected agent harness.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/kanban.mjsView file
59* Constructs the CommanderError class
L60: * @param {number} exitCode suggested exit code which could be used with process.exit
L61: * @param {string} code an id string representing the error
...
L1169: var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path88 = __require("node:path");
...
L1219: this._outputConfiguration = {
L1220: writeOut: (str5) => process2.stdout.write(str5),
L1221: writeErr: (str5) => process2.stderr.write(str5),
...
L1258: * @returns {Command[]}
L1259: * @private
L1260: */
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/kanban.mjsView on unpkg · L591169var EventEmitter = __require("node:events").EventEmitter;
L1170: var childProcess = __require("node:child_process");
L1171: var path88 = __require("node:path");
High
2009}
L2010: const execArgv = process2.execArgv ?? [];
L2011: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {
High
Findings
1 Critical5 High4 Medium6 Low
CriticalCredential Exfiltrationdist/kanban.mjs
HighChild Processdist/kanban.mjs
HighShelldist/kanban.mjs
HighCommand Output Exfiltrationdist/kanban.mjs
HighRuntime Package Installdist/kanban.mjs
HighKnown Malware Source Similaritydist/kanban.mjs
MediumDynamic Requirebin/ai4kanban.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/kanban.mjs
LowFilesystem
Affected versions and remediation
This report applies to wildcrane@0.11.17.
See all versions of wildcrane for other recorded verdicts.
- Review the evidence and your use of wildcrane@0.11.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.