registry / @continuevault/cli / 0.1.30

@continuevault/cli@0.1.30

ContinueVault CLI agent — stores Claude Code and Codex sessions

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `cv install`/starts the daemon or runs `cv codex`.

Impact

Conversation content can leave the machine; `cv codex` configures Codex to access a third-party remote MCP endpoint.

Mechanism

Persistent transcript collection and authenticated upload; explicit Codex MCP configuration mutation.

Rationale

No concrete stealth, install-time, remote-payload, or unconsented control-surface attack was found. The explicit persistent transcript-upload and Codex MCP setup capabilities warrant a warning rather than a block.

Evidence

package.jsonREADME.mddist/cli.jsdist/watcher.jsdist/sync.jsdist/commands/codex.jsdist/daemon/service.jsdist/filter.js~/.claude/projects/**/*.jsonl~/.codex/sessions/**/*.jsonl~/.continuevault/~/.codex/config.toml~/.bashrc~/.zshrc~/.config/systemd/user/continuevault.service

Network endpoints4

@continuevault/cli@0.1.30

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code