registry / @atlashub/smartstack-cli / 5.26.1
@atlashub/smartstack-cli@5.26.1
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 6d ago · by lpm-firewall-aiSource inspection found no malicious behavior. The postinstall hook is limited to a Windows PATH notice, and the statusline credential request targets Anthropic’s official usage endpoint for the displayed quota feature.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The statusline runs when configured by the CLI’s install command and starts a background refresh when its usage cache is stale.
Impact
The inspected flow supports the statusline usage feature; no unrelated recipient or confirmed attack effect was found.
Mechanism
It reads the saved token, skips missing or near-expiry credentials, and sends a bearer request to the fixed Anthropic usage host. The refresh has a SMARTSTACK_STATUSLINE_NO_NET opt-out.
AI rationale
Source inspection found no malicious behavior. The postinstall hook is limited to a Windows PATH notice, and the statusline credential request targets Anthropic’s official usage endpoint for the displayed quota feature.
Evidence
package.jsonscripts/postinstall.jsdist/index.jstemplates/scripts/statusline/index.js
Network endpoints1
api.anthropic.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The install hook only prints a Windows PATH notice. The installed statusline reads Claude Code’s saved OAuth token for a background usage refresh, checks expiry, and sends it to Anthropic’s fixed usage endpoint; the refresh can be disabled with SMARTSTACK_STATUSLINE_NO_NET.
- The other required source paths cover library exports and CLI modules for validation, scaffolding, documentation, and GitFlow. Their inspected excerpts did not establish a separate attack behavior.
Evidence against
- The scanner’s unofficial-gateway claim is not supported by the inspected request: its fixed host and path are api.anthropic.com and /api/oauth/usage.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
12 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
39* Constructs the CommanderError class
L40: * @param {number} exitCode suggested exit code which could be used with process.exit
L41: * @param {string} code an id string representing the error
...
L970: var EventEmitter2 = require("events").EventEmitter;
L971: var childProcess = require("child_process");
L972: var path3 = require("path");
...
L1019: this._outputConfiguration = {
L1020: writeOut: (str) => process11.stdout.write(str),
L1021: writeErr: (str) => process11.stderr.write(str),
...
L1055: * @returns {Command[]}
L1056: * @private
L1057: */
Findings
2 Critical8 High5 Medium5 Low
CriticalCredential Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelldist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighRuntime Package Installdist/index.js
HighSemantic Analysis Limitedtemplates/hooks/git-guard.cjs#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.26.1.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.26.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.