registry / @buffbirb/unclaude / 1.0.17

@buffbirb/unclaude@1.0.17

An opinionated AI dev tool setup script with a terminal UI. Configure privacy, code intelligence, and tool wrappers for Claude Code and OpenCode.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 128 KB of source, external domains: api.github.com, astral.sh, example.com, github.com, raw.githubusercontent.com

Source & flagged code

3 flagged

dist/mcp-proxy.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * unclaude-mcp-proxy

4 *

5 * Transparent stdio proxy for MCP servers. Intercepts tools/call requests

6 * for PR creation / update and strips Claude attribution from the body field

7 * before forwarding to the real MCP server.

8 *

9 * Usage:

10 * unclaude-mcp-proxy -- <real-mcp-server-cmd> [args...]

11 * env UNCLAUDE_MCP_PROXY_COMMAND="npx -y @modelcontextprotocol/server-github" unclaude-mcp-proxy

12 */

13import { spawn } from 'child_process';

14import { createInterface } from 'readline';

High

Child Process

Package source references child process execution.

dist/mcp-proxy.jsView on unpkg · L12

15const ATTRIBUTION_PATTERNS = [

16 /claude\.ai\/code\/session/gi,

17 /Co-Authored-By:.*Claude/gi,

18 /Generated [bw][yi]t*h*.*Claude/gi,

19 /^\s*🤖 Generated/gim,

20 /^---\s*$/gim,

21];

22function stripAttribution(text) {

23 let cleaned = text;

24 for (const pattern of ATTRIBUTION_PATTERNS) {

25 cleaned = cleaned.replace(pattern, '');

26 }

27 // Collapse multiple blank lines

28 cleaned = cleaned.replace(/\n{3,}/g, '\n\n');

29 // Trim

30 cleaned = cleaned.trim();

31 return cleaned;

32}

dist/common.jsView file

Lines 1-21javascript

1import { execFile, execFileSync, spawn } from 'child_process';

2import { promisify } from 'util';

3import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync, chmodSync, unlinkSync, accessSync, constants, readdirSync, statSync, } from 'fs';

4import { dirname, join } from 'path';

5import { homedir, tmpdir } from 'os';

Source & flagged code

3 flagged · loading source

dist/mcp-proxy.jsView file

12*/ L13: import { spawn } from 'child_process'; L14: import { createInterface } from 'readline';

High

Child Process

Package source references child process execution.

dist/mcp-proxy.jsView on unpkg · L12

dist/common.jsView file

384// sudo never blocks waiting for a password the ink TUI can't deliver. L385: export const SUDO_HINT = `Re-run after caching sudo credentials:\n sudo -v && npx @buffbirb/unclaude@latest install`; L386: export async function sudoRun(args) { L387: return new Promise((resolve, reject) => { L388: const proc = spawn('sudo', ['-n', ...args], { stdio: ['ignore', 'ignore', 'pipe'] }); L389: proc.on('close', c => (c === 0 ? resolve() : reject(new Error(`sudo ${args[0]} failed (${c})`))));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/common.jsView on unpkg · L384

1import { execFile, execFileSync, spawn } from 'child_process'; L2: import { promisify } from 'util'; ... L6: // ── Paths ──────────────────────────────────────────────────────────────────── L7: export const HOME = homedir(); L8: export const AIRC = join(HOME, '.airc'); L9: export const ZSHRC = join(HOME, '.zshrc'); L10: export const CLAUDE_SETTINGS = join(HOME, '.claude', 'settings.json'); ... L145: } L146: if (process.platform === 'darwin' && supported('appleSandbox')) { L147: items.push({ id: 'appleSandbox', label: FEATURE_LABELS.appleSandbox, indent: false }); ... L266: export async function run(cmd, args = []) { L267: const { stdout } = await execFileAsync(cmd, args);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/common.jsView on unpkg · L1

Findings

3 High4 Medium5 Low

HighChild Processdist/mcp-proxy.js

HighShell

HighRuntime Package Installdist/common.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/common.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/mcp-proxy.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * unclaude-mcp-proxy

4 *

5 * Transparent stdio proxy for MCP servers. Intercepts tools/call requests

6 * for PR creation / update and strips Claude attribution from the body field

7 * before forwarding to the real MCP server.

8 *

9 * Usage:

10 * unclaude-mcp-proxy -- <real-mcp-server-cmd> [args...]

11 * env UNCLAUDE_MCP_PROXY_COMMAND="npx -y @modelcontextprotocol/server-github" unclaude-mcp-proxy

12 */

13import { spawn } from 'child_process';

14import { createInterface } from 'readline';

High

Child Process

Package source references child process execution.

dist/mcp-proxy.jsView on unpkg · L12

15const ATTRIBUTION_PATTERNS = [

16 /claude\.ai\/code\/session/gi,

17 /Co-Authored-By:.*Claude/gi,

18 /Generated [bw][yi]t*h*.*Claude/gi,

19 /^\s*🤖 Generated/gim,

20 /^---\s*$/gim,

21];

22function stripAttribution(text) {

23 let cleaned = text;

24 for (const pattern of ATTRIBUTION_PATTERNS) {

25 cleaned = cleaned.replace(pattern, '');

26 }

27 // Collapse multiple blank lines

28 cleaned = cleaned.replace(/\n{3,}/g, '\n\n');

29 // Trim

30 cleaned = cleaned.trim();

31 return cleaned;

32}

dist/common.jsView file

Lines 1-21javascript

1import { execFile, execFileSync, spawn } from 'child_process';

2import { promisify } from 'util';

3import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync, chmodSync, unlinkSync, accessSync, constants, readdirSync, statSync, } from 'fs';

4import { dirname, join } from 'path';

5import { homedir, tmpdir } from 'os';

Lines 364-404javascript

364 mkdirSync(dirname(filePath), { recursive: true });

365 writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n');

366}

367export function patchJson(filePath, patch) {

368 const data = readJson(filePath);

369 patch(data);

370 writeJson(filePath, data);

371}

372export function ensureFile(filePath, defaultContent) {

373 if (!existsSync(filePath)) {

374 mkdirSync(dirname(filePath), { recursive: true });

375 writeFileSync(filePath, defaultContent);

376 }

377}

378export function appendIfMissing(filePath, marker, content) {

379 const existing = existsSync(filePath) ? readFileSync(filePath, 'utf8') : '';

380 if (!existing.includes(marker))

381 appendFileSync(filePath, content);

382}

383// Shown when a step needs root but no sudo creds are cached. -n is required so

384// sudo never blocks waiting for a password the ink TUI can't deliver.

385export const SUDO_HINT = `Re-run after caching sudo credentials:\n sudo -v && npx @buffbirb/unclaude@latest install`;

386export async function sudoRun(args) {

387 return new Promise((resolve, reject) => {

388 const proc = spawn('sudo', ['-n', ...args], { stdio: ['ignore', 'ignore', 'pipe'] });

389 proc.on('close', c => (c === 0 ? resolve() : reject(new Error(`sudo ${args[0]} failed (${c})`))));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/common.jsView on unpkg · L384

390 proc.on('error', reject);

391 });

392}

393export async function sudoStream(cmd, args, onLine) {

394 await stream('sudo', ['-n', cmd, ...args], onLine);

395}

396export async function writeExecutable(filePath, content, onLine) {

397 try {

398 mkdirSync(dirname(filePath), { recursive: true });

399 writeFileSync(filePath, content);

400 chmodSync(filePath, 0o755);

401 onLine(`${filePath} written`);

402 return;

403 }

404 catch { /* directory or file may be root-owned; fall through to sudo */ }