registry / @atlashub/smartstack-cli / 5.14.0
@atlashub/smartstack-cli@5.14.0
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious chain was found: postinstall only prints guidance and the credentialed network request is to Anthropic. The explicit installer still creates a recurring agent extension that accesses OAuth credentials, so warn under the extension lifecycle policy.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs `ss install`; then Claude Code invokes the configured status-line command.
Impact
A local OAuth token is disclosed to api.anthropic.com for an authenticated usage request; it is not sent to an unrelated host.
Mechanism
First-party Claude status-line setup with OAuth usage polling.
AI rationale
No concrete malicious chain was found: postinstall only prints guidance and the credentialed network request is to Anthropic. The explicit installer still creates a recurring agent extension that accesses OAuth credentials, so warn under the extension lifecycle policy.
Evidence
package.jsonscripts/postinstall.jsdist/index.jstemplates/scripts/statusline/index.js~/.claude/.credentials.json~/.claude/settings.json~/.claude/scripts/statusline/index.js~/.claude/cache/smartstack-usage.json
Network endpoints1
api.anthropic.com/api/oauth/usage
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Status-line template reads Claude OAuth credentials.
- It sends that bearer token to Anthropic's usage endpoint.
- User-invoked install configures a recurring Claude status-line command.
Evidence against
- postinstall only prints Windows PATH guidance.
- The network host is api.anthropic.com, not a third-party gateway.
- Installer preserves a foreign status line unless forced.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Oversized source lightweight scan
dist/index.js
Source & flagged code
16 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
3 Critical10 High6 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltatemplates/scripts/statusline/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelltemplates/skills/uat/cli/uat-run/execute.ts
HighSame File Env Network Executiontemplates/scripts/statusline/index.js
HighCredential Redirect Persistencedist/index.js
HighEntrypoint Foreign Package Code Overwritedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.14.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.