registry / @atlashub/smartstack-cli / 5.23.0
@atlashub/smartstack-cli@5.23.0
⚠ Under reviewSmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe inspected code shows a package-owned Claude status line and guarded settings update, while the token destination and remaining package behavior are unresolved. Manual review is appropriate because the available source excerpts do not establish a clean or malicious outcome.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The status line runs when invoked by Claude Code after it has been configured.
Impact
The reviewed evidence does not establish whether the token reaches only its intended service.
Mechanism
The script reads the Claude OAuth token and places it in an HTTPS authorization header; the destination host was not verified here.
AI rationale
The inspected code shows a package-owned Claude status line and guarded settings update, while the token destination and remaining package behavior are unresolved. Manual review is appropriate because the available source excerpts do not establish a clean or malicious outcome.
Evidence
.claude/settings.json.claude/cache/smartstack-usage.json
Decision evidence
public snapshotAI called this Manual Review at 69.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest defines an npm postinstall hook, and the inspected hook only prints Windows PATH guidance.
- The CLI reads Claude settings; its status line setup preserves an existing foreign command unless forced.
- The status line reads Claude’s OAuth token and sends it to a usage endpoint, but the endpoint’s configured host was not verified in this inspection.
- The documentation generator imports filesystem helpers and parses package documentation sources.
- The inspected files do not resolve the remaining package-wide analysis gaps, so a clean verdict is not established.
Evidence against
- The reviewed integration code shows a safeguard for an existing foreign status line and no token renewal.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
3 Critical8 High5 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltatemplates/scripts/statusline/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
HighSemantic Analysis Limitedscripts/generate-docs/index.ts#virtual:normalized:round1
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.23.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.23.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.