registry / @bakit-org/cli / 1.2.1

@bakit-org/cli@1.2.1

BA-kit CLI — AI-powered Business Analyst toolkit for Claude Code

AI Security Review

scanned 18d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. The install lifecycle removes stale product-named binaries, while broader downloads and Claude/Codex/Antigravity file writes are activated by explicit ba-kit commands.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs postinstall; ba-kit install/update/uninstall are user-invoked

Impact

May modify BA-kit-owned files under ~/.local/bin, ~/.claude, ~/.codex, or ~/.gemini/config when invoked; no exfiltration or hidden payload observed

Mechanism

scoped product installer and AI-agent toolkit file registration

Rationale

The suspicious primitives are package-aligned: a scoped postinstall cleanup and explicit CLI commands that download/install BA-kit content for supported agent runtimes. Static inspection found no credential harvesting, covert network endpoint, obfuscated payload, or unconsented AI-agent control-surface mutation beyond documented user-invoked install behavior.

Evidence

package.jsonpostinstall.jsba-kitREADME.md~/.local/bin/ba-kit~/.local/bin/ba-kit.cmd~/.local/bin/ba-kit.ps1~/.claude/settings.json~/.claude/ba-kit~/.codex/ba-kit~/.gemini/config/ba-kit

Network endpoints2

github.compolar.sh

@bakit-org/cli@1.2.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code