registry / @atlashub/smartstack-cli / 5.25.0
@atlashub/smartstack-cli@5.25.0
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe high-risk scanner hints resolve to a benign install message, product setup, and an intended-service usage request. The inspected source does not establish a concrete attack surface.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The package postinstall runs during npm installation; the statusline runs after a user invokes the CLI install command and Claude Code calls the configured statusline.
Impact
The reviewed behavior supports installation guidance and quota display; no unrelated credential recipient or unauthorized account action was found.
Mechanism
The postinstall helper prints Windows PATH guidance. The statusline uses the saved Claude OAuth token for a quota request to Anthropic’s official usage API.
AI rationale
The high-risk scanner hints resolve to a benign install message, product setup, and an intended-service usage request. The inspected source does not establish a concrete attack surface.
Network endpoints1
api.anthropic.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs a postinstall helper that only prints Windows PATH guidance; it does not perform a network request or write files.
- The configured statusline reads Claude Code’s saved OAuth token and sends a quota request to Anthropic’s usage API. The CLI installs that statusline as part of its install command.
- The required template sources describe project-scoped validation, generation, and GitFlow operations; inspection found no package-directed credential transfer in those paths.
- The prepared glob, Handlebars, and Zod manifests and entrypoints show ordinary library code and no malicious install behavior.
Evidence against
- The statusline reads a saved Claude OAuth token and sends it as bearer authentication; the inspected recipient is api.anthropic.com and the request fetches usage data.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
2 Critical8 High5 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
HighSemantic Analysis Limitedtemplates/hooks/git-guard.cjs#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.25.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.25.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.