registry / @cachly-dev/mcp-server / 0.10.185
@cachly-dev/mcp-server@0.10.185
Solve it once. From then on, your AI knows. Experience for coding agents, EU-hosted: 124 MCP tools for Claude Code, Cursor, Copilot & Windsurf. Learns from every bug fix, commit and CI run.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThis is a first-party agent-hook setup capability, activated through the setup command, that can affect agent context and exchange data during later sessions. The source does not establish a malicious transfer, so warn rather than block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the package's setup or autopilot command.
Impact
The hooks affect agent context and send associated data to the Cachly service during agent activity; no unrelated recipient or credential theft was established.
Mechanism
The setup flow installs hook scripts and wires them into Claude settings; the scripts use the configured Cachly API and JWT to exchange memory and learning data.
AI rationale
This is a first-party agent-hook setup capability, activated through the setup command, that can affect agent context and exchange data during later sessions. The source does not establish a malicious transfer, so warn rather than block.
Evidence
package.jsonscripts/postinstall.jsdist/src/index.jsdist/src/ambient-hooks.jshooks/cachly-ambient-einblendung.mjsdist/src/einblendung.js.claude/settings.json.claude/hooks/cachly-ambient-session-start.mjs.claude/hooks/cachly-ambient-prompt-submit.mjs.claude/hooks/cachly-ambient-pre-tool.mjs.claude/hooks/cachly-ambient-stop.mjs
Network endpoints1
api.cachly.dev
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest defines a postinstall hook, and its script prints an instruction to run the setup command.
- The setup branch requires an explicit setup or autopilot command and can register Claude hooks.
- Setup adds package-owned hooks to Claude settings for sessions, prompts, file operations, and stop events.
- The hooks retrieve Cachly memories and send learned data to the configured Cachly API.
- The inspected credential and agent references concern Cachly credentials, Cachly plugin setup, team instructions, and local git configuration.
Evidence against
- The postinstall hook displays the setup command; the inspected source performs editor-hook setup during that CLI flow.
- The hook requests use the Cachly API, defaulting to api.cachly.dev, with a Cachly JWT; these excerpts do not show transfer to an unrelated recipient.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
12 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/src/autor.jsView file
1import{execFileSync as c}from"node:child_process";const f=e=>n=>{try{return n.startsWith("-")?"":c("git",["config",n],{cwd:e,encoding:"utf-8",stdio:"pipe",timeout:1500,windowsHide:...
High
Findings
2 Critical7 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/src/index.js
CriticalPrevious Version Dangerous Deltadist/src/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/src/autor.js
HighSame File Env Network Executiondist/src/index.js
HighCredential Exfiltrationdist/src/index.js
HighTrigger Reachable Credential Exfiltrationdist/src/index.js
HighRuntime Package Installdist/src/cls-hook.js
HighSemantic Analysis Limiteddist/src/doctor.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/src/index.js
Affected versions and remediation
This report applies to @cachly-dev/mcp-server@0.10.185.
See all versions of @cachly-dev/mcp-server for other recorded verdicts.
- Review the evidence and your use of @cachly-dev/mcp-server@0.10.185 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.