@catalyst-cloud/cli@0.16.36
Set up Catalyst Cloud, check your tickets and manage your account from the command line.
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection found scoped product behavior: the postinstall is global-only and repoints only a recognized older Catalyst runner agent, while project and plugin integrations are limited to setup or approved update paths. The Codex login path reads the account ID to derive a slot and uses the configured Catalyst API for its account map; no attack behavior was established.
Decision evidence
public snapshot- package.json declares a postinstall hook; bin/postinstall.js runs it only for global installs and supports an opt-out.
- The repointer skips unrecognized or non-older Catalyst CLIs, checks write access, backs up the agent, and restores it if the update does not succeed.
- Codex attribution setup is limited to the current home and requires Codex to be present; its account lookup reads the account ID and maps it to a slot.
- Codex launch metadata contains the slot and host name; refresh fetches a coding-account map through the configured Catalyst API.
- The flagged project and Claude plugin changes are scoped to explicit apply/update paths and an existing approved user plugin.
- Inspected dependency sources implement SQLite access and terminal formatting; their manifests show no install lifecycle hooks.
Source & flagged code
8 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
bin/launch.jsView on unpkg · L61Findings
Affected versions and remediation
This report applies to @catalyst-cloud/cli@0.16.36.
See all versions of @catalyst-cloud/cli for other recorded verdicts.
- Review the evidence and your use of @catalyst-cloud/cli@0.16.36 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.