registry / @atlashub/smartstack-cli / 5.16.0
@atlashub/smartstack-cli@5.16.0
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 27d ago · by lpm-firewall-aiStatic source inspection found a benign install hook and a status-line usage request that sends Claude’s token to Claude’s usage API. The flagged configuration is part of the explicit CLI installation flow, and the required source paths show no separate malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the CLI’s install operation with all components enabled; the status-line refresh runs when its cache needs updating.
Impact
The inspected source shows the token sent to its intended service for usage data; no unrelated recipient or confirmed attack surface was established.
Mechanism
The script reads the token from Claude’s credentials file and makes an authenticated request to api.anthropic.com for usage data.
AI rationale
Static source inspection found a benign install hook and a status-line usage request that sends Claude’s token to Claude’s usage API. The flagged configuration is part of the explicit CLI installation flow, and the required source paths show no separate malicious behavior.
Evidence
package.jsonscripts/postinstall.jsdist/index.jstemplates/scripts/statusline/index.jstemplates/skills/uat/cli/uat-run/execute.tsscripts/generate-docs/index.ts
Network endpoints1
api.anthropic.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a postinstall hook, but it only runs scripts/postinstall.js; that script prints a Windows PATH note.
- dist/index.js locates Claude Code’s settings file under the user’s home directory and reads it for configuration.
- The status-line script validates Claude configuration locations and keeps its usage cache there.
- The status-line usage refresh sends the Claude OAuth token to api.anthropic.com at the Claude usage endpoint.
- dist/index.js configures the status line only during the CLI install operation when its install-all option is active.
- The UAT runner uses filesystem operations and a child process as part of its testing workflow.
- The documentation generator reads source files and writes generated documentation.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
14 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
3 Critical9 High5 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltatemplates/scripts/statusline/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelltemplates/skills/uat/cli/uat-run/execute.ts
HighSame File Env Network Executiontemplates/scripts/statusline/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.16.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.