registry / @decoopus/claude-setup / 1.0.3

@decoopus/claude-setup@1.0.3

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The manifest has no install hook, and the CLI presents the gateway endpoint before saving the gateway-specific key and URL to local Claude Desktop settings. The default third-party gateway is disclosed in the setup flow, and no concrete attack behavior was identified.

Static reason

No blocking static signals were detected.

Trigger

A user runs the CLI and supplies or enters gateway details.

Impact

Claude Desktop is directed to the configured gateway; the inspected setup code does not establish an attack.

Mechanism

The CLI stores the supplied gateway URL and API key in Claude Desktop configuration.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes bin/cli.js and defines only a start script; it has no install lifecycle hook.
The CLI defaults to a third-party gateway, asks for a gateway API key, and displays the gateway endpoint in its configuration summary.
The user-invoked setup writes the supplied gateway URL and key to Claude Desktop configuration.

Evidence against

The CLI uses https://api-anthropic.help as its default gateway.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 28.2 KB of source, external domains: api-anthropic.help

Source & flagged code

7 flagged

package.jsonView file

5"main": "bin/cli.js", "bin": { "claude-setup": "bin/cli.js", "claude-desktop-setup": "bin/cli.js" }, "files": [ "bin", "README.md", "LICENSE" ], "scripts": { "start": "node ./bin/cli.j

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js and defines only a start script; it has no install lifecycle hook.

package.jsonView on unpkg · L5

14], "scripts": { "start": "node ./bin/cli.js" }, "keywords": [ "claude", "claude-desktop", "anthropic", "setup",

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js and defines only a start script; it has no install lifecycle hook.

package.jsonView on unpkg · L14

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; const DEFAULT_MODELS = [ { name: 'claude-fable-5-1', labelOver

Low

Ai Review Evidence

The CLI defaults to a third-party gateway, asks for a gateway API key, and displays the gateway endpoint in its configuration summary.

bin/cli.jsView on unpkg · L17

705email = email || `${os.userInfo().username || 'user'}@gateway.local`; warn(`Using profile email: ${email}`); } // Prompt 2: API Key if (!apiKey) { log(`\n ${c.terracotta}✳${c.reset} ${c.creamBold}Enter your gateway API Key:${c.reset}`);

Low

Ai Review Evidence

The CLI defaults to a third-party gateway, asks for a gateway API key, and displays the gateway endpoint in its configuration summary.

bin/cli.jsView on unpkg · L705

719gatewayUrl = normalizeUrl(gatewayUrl); log(`\n ${c.creamBold}Configuration Summary:${c.reset}`); log(` Profile Identity : ${c.creamBold}${email}${c.reset}`); log(` Gateway Endpoint : ${c.terracotta}${gatewayUrl}${c.reset}`)

Low

Ai Review Evidence

The CLI defaults to a third-party gateway, asks for a gateway API key, and displays the gateway endpoint in its configuration summary.

bin/cli.jsView on unpkg · L719

518config.deploymentMode = '3p'; config.inferenceProvider = 'gateway'; config.inferenceGatewayBaseUrl = url; config.inferenceGatewayApiKey = apiKey; config.inferenceGatewayAuthScheme = authScheme; config.inferenceModels = DEFAULT

Low

Ai Review Evidence

The user-invoked setup writes the supplied gateway URL and key to Claude Desktop configuration.

bin/cli.jsView on unpkg · L518

770// Step 5: Update JSON Files const configPaths = getConfigFilePaths(); for (const item of configPaths) { const ok = updateConfigFile(item.file, gatewayUrl, apiKey, authScheme, email); if (ok) { success(`Updated [${item.type}]: ${

Low

Ai Review Evidence

The user-invoked setup writes the supplied gateway URL and key to Claude Desktop configuration.

bin/cli.jsView on unpkg · L770

Source & flagged code

7 flagged · loading source

package.jsonView file

5"main": "bin/cli.js", "bin": { "claude-setup": "bin/cli.js", "claude-desktop-setup": "bin/cli.js" }, "files": [ "bin", "README.md", "LICENSE" ], "scripts": { "start": "node ./bin/cli.j

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js and defines only a start script; it has no install lifecycle hook.

package.jsonView on unpkg · L5

14], "scripts": { "start": "node ./bin/cli.js" }, "keywords": [ "claude", "claude-desktop", "anthropic", "setup",

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js and defines only a start script; it has no install lifecycle hook.

package.jsonView on unpkg · L14

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; const DEFAULT_MODELS = [ { name: 'claude-fable-5-1', labelOver

Low

Findings

1 Medium10 Low

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/cli.js

Affected versions and remediation

This report applies to @decoopus/claude-setup@1.0.3.

See all versions of @decoopus/claude-setup for other recorded verdicts.

Review the evidence and your use of @decoopus/claude-setup@1.0.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 11:46:33.727Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.