@atlashub/smartstack-cli@5.8.0
SmartStack Claude Code automation toolkit - GitFlow, EF Core migrations, prompts and more
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection disproves the scanner's claimed install-time credential/command-output exfiltration. The explicit global Claude setup and device-bound licensing telemetry warrant a warning, not a block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs smartstack install or a licensed CLI command
Impact
User-approved agent configuration changes and identifiable licensing telemetry
Mechanism
Claude Code configuration plus license-device telemetry
AI rationale
Source inspection disproves the scanner's claimed install-time credential/command-output exfiltration. The explicit global Claude setup and device-bound licensing telemetry warrant a warning, not a block.
Evidence
package.jsonscripts/postinstall.jsdist/index.js~/.claude/settings.json~/.claude/hooks~/.smartstack/device.json~/.smartstack/license.key
Network endpoints1
license.atlashub.ch
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- dist/index.js: explicit install command writes global ~/.claude settings, hooks, and plugins
- dist/index.js: licensed CLI sends machine fingerprint, hostname, and instance ID to license.atlashub.ch
- dist/index.js: install defaults to global Claude directory and invokes Claude plugin installation
Evidence against
- scripts/postinstall.js only prints a Windows PATH hint
- No install-time network, file mutation, or agent configuration changes found
- Network calls are package-aligned licensing operations triggered by CLI commands
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
15 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
•A module-load call serializes the broad process environment, working directory, and command-line arguments and posts them to a literal external destination.
dist/index.js:
`choices: ${option.argChoices.map((choice) => JSON.stringify(choice)).join(", ")}`
`default: ${option.defaultValueDescription || JSON.stringify(option.defaultValue)}`
extraInfo.push(`preset: ${JSON.stringify(option.presetArg)}`);
`choices: ${argument.argChoices.map((choice) => JSON.stringify(choice)).join(", ")}`
`default: ${argument.defaultValueDescription || JSON.stringify(argument.defaultValue)}`
writeOut: (str) => process11.stdout.write(str),
writeErr: (str) => process11.stderr.write(str),
* Call with no parameters to parse `process.argv`. Detects Electron and special node options like `node --eval`. Easy mode!
Findings
5 Critical6 High7 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalCommand Output Exfiltrationdist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/index.js
HighShelltemplates/skills/uat/cli/uat-run/execute.ts
HighTrigger Reachable Credential Exfiltrationdist/index.js
HighTrigger Reachable Persistencedist/index.js
HighRuntime Package Installdist/index.js
Medium
Affected versions and remediation
This report applies to @atlashub/smartstack-cli@5.8.0.
See all versions of @atlashub/smartstack-cli for other recorded verdicts.
- Review the evidence and your use of @atlashub/smartstack-cli@5.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.