registry / @cloop/runner / 0.3.36
@cloop/runner@0.3.36
Make your computer and your agents Cloop machines: device login, the machine daemon, the Cloop MCP server, and Claude Code hooks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package has no install lifecycle scripts, and the flagged shell execution belongs to the `cloop connect` agent setup flow. The inspected installer fetches Claude Code from claude.ai, consistent with the package’s stated purpose; no concrete malicious behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `cloop connect`.
Impact
No malicious impact identified in the inspected behavior.
Mechanism
The command may install coding-agent tools using their documented installers; the inspected Claude installer comes from claude.ai.
AI rationale
The package has no install lifecycle scripts, and the flagged shell execution belongs to the `cloop connect` agent setup flow. The inspected installer fetches Claude Code from claude.ai, consistent with the package’s stated purpose; no concrete malicious behavior was found.
Network endpoints1
claude.ai
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no install, preinstall or postinstall lifecycle scripts.
- The CLI dispatches agent setup through the explicit `cloop connect` command.
- The installer flow fetches Claude Code’s installer from `claude.ai`, and the code identifies it as Anthropic’s installer.
Evidence against
- The connect flow can run shell commands and install or update coding-agent tools; this is a meaningful runtime capability, but it is part of the package’s stated machine setup purpose.
- The package communicates with Cloop’s service as part of its stated login and machine-registration functions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/chunk-SBYSVZ7J.jsView file
84// src/presence.ts
L85: import { execFileSync as execFileSync2 } from "child_process";
L86: import { randomUUID } from "crypto";
High
Child Process
Package source references child process execution.
dist/chunk-SBYSVZ7J.jsView on unpkg · L84dist/chunk-OJH72SCM.jsView file
48windowsExecutable,
L49: windowsPowerShellEnv,
L50: writeBoxConfig
...
L107: import { basename, delimiter, dirname, join, posix, win32 } from "path";
L108: var CODEX_RELEASES = "https://github.[redacted]";
L109: var CODEX_TRIPLES = {
...
L127: var CODEX_SUMS = `${CODEX_RELEASES}/codex-package_SHA256SUMS`;
L128: function codexInstallCommand(home, platform = process.platform, arch = process.arch) {
L129: const asset = codexAsset(platform, arch);
...
L235: }
L236: function findLocalCodex(home, env = process.env) {
L237: findIn(codexBinDir(home), "codex", env);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-OJH72SCM.jsView on unpkg · L48Findings
1 Critical3 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/chunk-6SRF3XGA.js
HighChild Processdist/chunk-SBYSVZ7J.js
HighSandbox Evasion Gated Capabilitydist/chunk-OJH72SCM.js
HighRuntime Package Installdist/chunk-OJH72SCM.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @cloop/runner@0.3.36.
See all versions of @cloop/runner for other recorded verdicts.
- Review the evidence and your use of @cloop/runner@0.3.36 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.