Frely Cli

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  src/runtime/mcp.integration.test.ts, line 138

  fs.unlinkSync("exclusive.lock");

• Install and update

  Serious

  install fetches a script from the network. The docs document an installer that pipes a download into a shell.

  INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER

  README.md, line 37

  curl -fsSL https://frely.cloud/start.sh | sh

  README.zh-CN.md, line 37

  curl -fsSL https://frely.cloud/start.sh | sh

  start.sh, line 33

  if ! curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --tlsv1.2 "$url" | sh; then fail "installation failed."; fi

  Show more

  start.sh, line 35

  if ! wget --https-only --quiet "$url" -O - | sh; then fail "installation failed."; fi

  site/docs-content.mjs, line 36

  'On macOS or Linux run: curl -fsSL https://frely.cloud/start.sh | sh. On Windows run the PowerShell command

  site/commands.json, line 2

  "installMac": "curl -fsSL https://frely.cloud/start.sh | sh",

  site/commands.json, line 3

  "installLinux": "curl -fsSL https://frely.cloud/start.sh | sh",

  site/locales/en.json, line 121

  "install.agentPrompt": "Install Frely CLI on this computer and connect it as a device MCP. On macOS or Linux run: curl -fsSL https://frely.cloud/install.sh | sh - on Windows PowerS

  site/locales/zh-CN.json, line 120

  "install.agentPrompt": "请在这台电脑上安装 Frely CLI，并把它连接为设备 MCP。macOS 或 Linux 运行：curl -fsSL https://frely.cloud/install.sh | sh；Windows PowerShell 运行：curl.exe -fsSLo \"$env:TEMP\\frely-in

• Network

  Concern

  can reach a host that is not written as a fixed address. can reach x. The description does not name that host.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  install.ps1, line 22

  $curl = Get-Command curl.exe -CommandType Application -ErrorAction SilentlyContinue | Select-Object -First 1

  install.sh, line 30

  fetch() {

  install.sh, line 33

  elif command -v curl >/dev/null 2>&1; then

  Show more

  install.sh, line 34

  curl --fail --silent --show-error --location --proto '=https' --proto-redir '=https' --tlsv1.2 --connect-timeout 8 --speed-limit 51200 --speed-time 20 "$1" -o "$2"

  install.sh, line 35

  elif command -v wget >/dev/null 2>&1; then

  install.sh, line 36

  wget --https-only --quiet --timeout=20 "$1" -O "$2"

  install.sh, line 37

  else fail "A system HTTPS downloader (curl or wget) is required."; fi

  start.sh, line 32

  if command -v curl >/dev/null 2>&1; then

  scripts/verify-site-release.mjs, line 6

  const response = await fetch("https://cli.frely.cloud/release.json?sha=" + expected, {cache: "no-store", signal: AbortSignal.timeout(10000)});

  site/docs-content.mjs, line 44

  e command on the server. It looks like: curl -fsSL https://frely.cloud/start.sh | FRE

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  scripts/installer-smoke.mjs, line 31

  const profileEnv = { ...env, FRELY_INSTALL_DIR: profileDestination, FRELY_INSTALL_NO_PROFILE: "0", SHELL: "/bin/zsh", PATH: "/usr/bin:/bin" };

  scripts/release-entry.test.mjs, line 31

  const invoke = (args, overrides={}) => spawnSync(process.execPath, [join(repo,"scripts/release-entry.mjs"), ...args], {cwd:repo, env:{...env,...overrides}, encoding:"utf8"});

  src/runtime/sandbox.test.ts, line 62

  "path:~/.config/frely", "path:~/.config/frely/devices", "path:~/.ssh/keys", `path:${join(home, ".aws", "config")}`, "path:~/Library/LaunchAgents/x",

  Show more

  scripts/standalone-smoke.mjs, line 16

  await writeFile(join(directory, ".env"), "FRELY_RELAY_URL=http://invalid-autoload.example\n");

  src/credential-auth.test.ts, line 13

  const oldMode = process.env.FRELY_CREDENTIAL_STORE;

  src/credential-auth.test.ts, line 14

  const oldKey = process.env.FRELY_CREDENTIAL_KEY;

  src/credential-auth.test.ts, line 18

  process.env.FRELY_CREDENTIAL_STORE = "

  src/credential-auth.test.ts, line 19

  delete process.env.FRELY_CREDENTIAL_KEY;

  src/index.ts, line 375

  if (serviceCredentialStore) process.env.FRELY_CREDENTIAL_STORE = serviceCredentialStore;

  src/local-mcp-command.test.ts, line 53

  assert.deepEqual((JSON.parse(json) as { servers: Array<{ name: string; env: string[] }> }).servers.find((server) => server.name === "notes")?.env, ["SECRET"]);

  src/service.test.ts, line 16

  const previous = { FRELY_CREDENTIAL_KEY: process.env.FRELY_CREDENTIAL_KEY, XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME };

  src/service.test.ts, line 17

  process.env.FRELY_CREDENTIAL_KEY = "a".repeat(64); process.env.XDG_CONFIG_HOME = "/synthetic/config";

  src/service.ts, line 135

  const mode = process.env.FRELY_CREDENTIAL_KEY !== undefined ? "encrypted-file" : process.env.FRELY_CREDENTIAL_STORE ?? "auto";

  src/uninstall.test.ts, line 185

  assert.equal(spawned[0]!.env.FRELY_UNINSTALL_FILE, "C:\\Users\\u\\AppData\\Local\\Frely\\bin\\frely.exe");

  src/uninstall.test.ts, line 186

  assert.equal(spawned[0]!.env.FRELY_UNINSTALL_PID, "4242");

  src/runtime/sandbox.test.ts, line 74

  assert.equal(isKnownGrantName("path:~/.ssh/keys"), false);

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit bf697c884f45. can delete files. install fetches a script from the network. The docs document an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. can reach x. The description does not name that host. reads a credential or environment file.

Date and source

Date checked: 23 Oct 2026

Read how this letter is chosen