registry / @bakit-org/cli / 1.2.3

@bakit-org/cli@1.2.3

BA-kit CLI — AI-powered Business Analyst toolkit for Claude Code

AI Security Review

scanned 8h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The explicit ba-kit install command fetches package content from GitHub and installs it into selected AI-tool directories. For Claude Code it can register downloaded shell hooks in the user's settings.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs ba-kit install or ba-kit update after installing the package.

Impact

Downloaded release content can add skills, agents, templates, hooks, and optional Python dependencies to the selected runtime.

Mechanism

User-invoked remote content deployment and Claude Code hook registration

Rationale

This is a real user-invoked agent-extension deployment capability with remote executable-content exposure, but the inspected source does not establish malicious intent or a concrete theft/destructive chain. The lifecycle deletion is narrow and package-aligned, though unprompted.

Evidence

package.jsonpostinstall.jsbin/ba-kit.jsba-kit~/.local/bin/ba-kit~/.local/bin/ba-kit.cmd~/.local/bin/ba-kit.ps1~/.claude/settings.json~/.claude/hooks~/.claude/skills~/.codex/skills~/.gemini/config/skills

Network endpoints1

github.com

@bakit-org/cli@1.2.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code