@civitas-cerebrum/achilles
Autonomous quality-assurance methodology — agent skills, harness hooks, return-shape schemas, and post-install plumbing that drive the @civitas-cerebrum/element-interactions framework end-to-end.
This report shows the evidence for @civitas-cerebrum/achilles@0.1.4, the only known version.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is concrete, unconsented postinstall mutation of a foreign, broad AI-agent control surface, not merely an explicit CLI setup flow. The lifecycle persistence meets the block policy despite the absence of credential exfiltration.
Decision evidence
public snapshot- package.json runs scripts/postinstall.js automatically.
- scripts/postinstall.js copies skills and hooks into ~/.claude.
- scripts/postinstall.js registers broad PreToolUse/UserPromptSubmit hooks in ~/.claude/settings.json.
- Postinstall downloads and executes jq at ~/.claude/hooks/bin/jq without a cryptographic hash.
- Installed hooks can deny agent Write/Edit and Bash operations.
- No credential harvesting or unrelated data exfiltration found.
- Network download is a named jq GitHub release asset.
Source & flagged code
5 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references a known benign dynamic code generation pattern.
hooks/lib/validator.bundle.mjsView on unpkg · L10271Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/postinstall.jsView on unpkg · L29Package ships non-JavaScript build or shell helper files.
hooks/subagent-schema-preread-gate.shView on unpkgFindings
Affected versions and remediation
This report applies to @civitas-cerebrum/achilles@0.1.4.
The versions list below shows the verdict for each recorded version.
- Avoid installing @civitas-cerebrum/achilles@0.1.4. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.