registry / @bakit-org/cli / 1.1.7

@bakit-org/cli@1.1.7

BA-kit CLI — AI-powered Business Analyst toolkit for Claude Code

AI Security Review

scanned 18d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malware behavior was found in the shipped source. The package is an installer/manager for a Claude Code toolkit and has guarded extension risk because user-invoked install/update downloads remote content and registers Claude hooks.

Static reason

One or more suspicious static signals were detected.

Trigger

postinstall warning on npm install; full behavior only on user-running ba-kit install/update/uninstall

Impact

Can install or update files under ~/.claude and ~/.local/bin and add command hooks to Claude Code settings after user invocation.

Mechanism

GitHub release downloader and Claude Code hook registrar

Rationale

The install-time lifecycle script is benign warning-only, and the higher-risk filesystem/network behavior is package-aligned and user-invoked. Because it can register Claude Code command hooks from downloaded release content not present in the npm tarball, downgrade to warn rather than block.

Evidence

package.jsonpostinstall.jsba-kitREADME.md~/.local/bin/ba-kit~/.claude~/.claude/settings.json~/.claude/ba-kit/VERSION~/.claude/ba-kit/release-manifest.json~/.claude/ba-kit/PRODUCT

Network endpoints4

github.compolar.sh/checkout/polar_c_Bd8xfL8VTBQtYpol2MdbS2M5acEFMsjKmDFec0bYVGF

@bakit-org/cli@1.1.7

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code