registry / @decoopus/claude-setup / 1.0.4

@decoopus/claude-setup@1.0.4

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The inspected source implements an explicitly invoked gateway setup flow: it prompts for a gateway key, displays the endpoint, and stores those values in Claude Desktop configuration. The default is a publisher-selected third-party gateway, but the package does not transmit existing service credentials or perform hidden install-time actions.

Static reason

No blocking static signals were detected.

Trigger

The user invokes the setup command and provides or accepts the displayed gateway URL and key.

Impact

No unauthorized effect was established; future gateway requests use the configured service and key.

Mechanism

The CLI writes the selected gateway URL and entered key to Claude Desktop configuration; no package-side credential transmission was found in the inspected source.

AI rationale

Evidence

bin/cli.js

Network endpoints1

api-anthropic.help

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes bin/cli.js as the command entrypoint and defines only a start script, with no install lifecycle hook.
The CLI uses https://api-anthropic.help as its default gateway and displays the selected gateway endpoint in its setup summary.
Setup prompts the user for a gateway API key and stops if the key is empty.
The CLI saves the entered key as Claude Desktop's gateway key in configuration files when the user runs setup.

Evidence against

The publisher-selected default gateway receives the entered key through Claude Desktop's saved gateway configuration, so later use depends on trusting that third-party service.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 28.2 KB of source, external domains: api-anthropic.help

Source & flagged code

7 flagged

package.jsonView file

5"main": "bin/cli.js", "bin": { "claude-setup": "bin/cli.js", "claude-desktop-setup": "bin/cli.js" }, "files": [ "bin", "README.md", "LICENSE" ], "scripts": { "start": "node ./bin/cli.js"

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js as the command entrypoint and defines only a start script, with no install lifecycle hook.

package.jsonView on unpkg · L5

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; cons

Low

Ai Review Evidence

The CLI uses https://api-anthropic.help as its default gateway and displays the selected gateway endpoint in its setup summary.

bin/cli.jsView on unpkg · L17

724log(` Gateway Endpoint : ${c.terracotta}${gatewayUrl}${c.reset}`); log(` API Key : ${c.sand}●●●●●●●●●● (${apiKey.

Low

Ai Review Evidence

The CLI uses https://api-anthropic.help as its default gateway and displays the selected gateway endpoint in its setup summary.

bin/cli.jsView on unpkg · L724

711Enter your gateway API Key:${c.reset}`); apiKey = await askQuestion(` ${c.sand}API Key: ${c.reset}`); } if (!apiKey) { error('API Key cannot be empty. Setup aborted.'); process.exit(1); } gatewayUrl = normalizeUrl(gat

Low

Ai Review Evidence

Setup prompts the user for a gateway API key and stops if the key is empty.

bin/cli.jsView on unpkg · L711

520config.inferenceGatewayBaseUrl = url; config.inferenceGatewayApiKey = apiKey; config.inferenceGatewayAuthScheme = authScheme; config.inferenceModels = DEFAULT_MODELS; // Display Identity config.deploymentDisplayName = email; config.deploymentDisplaySubtitle = 'Claude Gateway'; config.userEm

Low

Ai Review Evidence

The CLI saves the entered key as Claude Desktop's gateway key in configuration files when the user runs setup.

bin/cli.jsView on unpkg · L520

772const configPaths = getConfigFilePaths(); for (const item of configPaths) { const ok = updateConfigFile(item.file, gatewayUrl, apiKey, authScheme, email); if (ok) { success(`Updated [${item.type}]: ${item.file}`); } } log(`\n${c.terracotta}╭──────────────────────────────────────────────────

Low

Ai Review Evidence

The CLI saves the entered key as Claude Desktop's gateway key in configuration files when the user runs setup.

bin/cli.jsView on unpkg · L772

529config.inferenceGatewayHeaders = { 'X-User-Email': email }; fs.writeFileSync(targetPath, JSON.stringify(config, null, 2), 'utf8'); return true; } catch (err) { error(`Could not write to ${targ

Low

Ai Review Evidence

The CLI saves the entered key as Claude Desktop's gateway key in configuration files when the user runs setup.

bin/cli.jsView on unpkg · L529

Source & flagged code

7 flagged · loading source

package.jsonView file

5"main": "bin/cli.js", "bin": { "claude-setup": "bin/cli.js", "claude-desktop-setup": "bin/cli.js" }, "files": [ "bin", "README.md", "LICENSE" ], "scripts": { "start": "node ./bin/cli.js"

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js as the command entrypoint and defines only a start script, with no install lifecycle hook.

package.jsonView on unpkg · L5

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; cons

Low

Ai Review Evidence

The CLI uses https://api-anthropic.help as its default gateway and displays the selected gateway endpoint in its setup summary.

bin/cli.jsView on unpkg · L17

724log(` Gateway Endpoint : ${c.terracotta}${gatewayUrl}${c.reset}`); log(` API Key : ${c.sand}●●●●●●●●●● (${apiKey.

Low

Ai Review Evidence

Findings

1 Medium10 Low

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/cli.js

Affected versions and remediation

This report applies to @decoopus/claude-setup@1.0.4.

See all versions of @decoopus/claude-setup for other recorded verdicts.

Review the evidence and your use of @decoopus/claude-setup@1.0.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 11:46:14.742Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.