registry / @atlashub/smartstack-cli / 5.15.0
@atlashub/smartstack-cli@5.15.0
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe postinstall action only prints PATH guidance, and the examined credential request targets Anthropic’s own usage API. Agent configuration is part of the CLI setup flow, with foreign statusline commands preserved by default; the flagged project and documentation writes are ordinary generation behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The statusline refresh runs after it is configured; agent settings are changed through CLI setup.
Impact
The token is used for the intended Anthropic usage request. No unrelated credential recipient or unconsented install-time agent configuration change was found.
Mechanism
The statusline reads the saved Claude token and requests usage data from api.anthropic.com. Setup configures a package-owned statusline command and preserves a foreign command unless forced.
AI rationale
The postinstall action only prints PATH guidance, and the examined credential request targets Anthropic’s own usage API. Agent configuration is part of the CLI setup flow, with foreign statusline commands preserved by default; the flagged project and documentation writes are ordinary generation behavior.
Evidence
package.jsonscripts/postinstall.jsdist/index.jstemplates/scripts/statusline/index.jstemplates/skills/uat/cli/uat-run/execute.tsscripts/generate-docs/index.ts
Network endpoints1
api.anthropic.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs a postinstall script that only prints Windows PATH guidance for global installs.
- The requested dist/index.js location reads Claude settings; statusline setup writes a package-owned command while preserving a foreign command unless forced.
- The statusline script validates the Claude config directory and reads its stored Claude OAuth token for its usage request.
- The statusline sends that token to api.anthropic.com for the Anthropic usage endpoint.
- The UAT runner writes generated plan files within the selected project, and the documentation generator writes generated documentation.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
3 Critical9 High5 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltatemplates/scripts/statusline/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelltemplates/skills/uat/cli/uat-run/execute.ts
HighSame File Env Network Executiontemplates/scripts/statusline/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.15.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.