registry / @cloop/runner / 0.3.38
@cloop/runner@0.3.38
Make your computer and your agents Cloop machines: device login, the machine daemon, the Cloop MCP server, and Claude Code hooks.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe reviewed process execution and network access support the package's stated coding-agent connection workflow. The install is triggered by `cloop connect`, announced to the user, and uses Anthropic's official installer host.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs `cloop connect` and the flow finds Claude Code missing under its selection conditions.
Impact
Installs the coding-agent tool needed by the package's machine-connect workflow.
Mechanism
Runs Anthropic's installer script from claude.ai, then checks for the installed agent.
AI rationale
The reviewed process execution and network access support the package's stated coding-agent connection workflow. The install is triggered by `cloop connect`, announced to the user, and uses Anthropic's official installer host.
Network endpoints1
claude.ai
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes its purpose as connecting computers and coding agents to Cloop.
- The CLI runs the connect flow only when the user invokes `cloop connect`.
- When that flow finds no suitable coding agent, it announces that it will install Claude Code using Anthropic's installer.
- The installer command uses Anthropic's official `claude.ai` install script.
Evidence against
- The install command downloads and runs a shell script, but it is part of the user-invoked connect flow and is announced before running.
- The scanner's child-process and network findings are consistent with installing and managing coding agents; no unrelated data collection or attack behavior was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/chunk-SBYSVZ7J.jsView file
84// src/presence.ts
L85: import { execFileSync as execFileSync2 } from "child_process";
L86: import { randomUUID } from "crypto";
High
Child Process
Package source references child process execution.
dist/chunk-SBYSVZ7J.jsView on unpkg · L84dist/chunk-3WRLILTX.jsView file
48windowsExecutable,
L49: windowsPowerShellEnv,
L50: writeBoxConfig
...
L107: import { basename, delimiter, dirname, join, posix, win32 } from "path";
L108: var CODEX_RELEASES = "https://github.[redacted]";
L109: var CODEX_TRIPLES = {
...
L127: var CODEX_SUMS = `${CODEX_RELEASES}/codex-package_SHA256SUMS`;
L128: function codexInstallCommand(home, platform = process.platform, arch = process.arch) {
L129: const asset = codexAsset(platform, arch);
...
L235: }
L236: function findLocalCodex(home, env = process.env) {
L237: findIn(codexBinDir(home), "codex", env);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-3WRLILTX.jsView on unpkg · L48Findings
3 High3 Medium6 Low
HighChild Processdist/chunk-SBYSVZ7J.js
HighSandbox Evasion Gated Capabilitydist/chunk-3WRLILTX.js
HighRuntime Package Installdist/chunk-3WRLILTX.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @cloop/runner@0.3.38.
See all versions of @cloop/runner for other recorded verdicts.
- Review the evidence and your use of @cloop/runner@0.3.38 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.