@atlashub/smartstack-cli@5.12.0
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 27d ago · by lpm-firewall-aiSource inspection found agent configuration and plugin setup behind an explicit CLI command, not the npm install hook. This fits a warning for user-invoked agent configuration capability; the inspected credential-related indicators did not establish an attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the smartstack install command.
Impact
Claude configuration and installed plugins may change as part of the requested setup.
Mechanism
The command configures Claude settings and installs default plugins unless disabled.
AI rationale
Source inspection found agent configuration and plugin setup behind an explicit CLI command, not the npm install hook. This fits a warning for user-invoked agent configuration capability; the inspected credential-related indicators did not establish an attack.
Evidence
dist/index.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit install command sets up SmartStack commands, agents, and hooks in the user’s Claude directory.
- When run, the install command installs default Claude Code plugins unless the user disables that option.
- The status-line setup preserves an existing foreign command unless forced.
- The status-line usage endpoint is Anthropic’s API.
Evidence against
- The npm postinstall hook only prints a Windows PATH tip for global installs; it does not perform agent setup.
- The inspected source did not establish credential theft or another active attack.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
2 Critical9 High5 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiontemplates/scripts/statusline/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
HighSemantic Analysis Limitedscripts/generate-docs/index.ts#virtual:normalized:round1
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.12.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.