registry / @decoopus/claude-setup / 1.0.6

@decoopus/claude-setup@1.0.6

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The inspected behavior matches the advertised third-party gateway setup: the CLI requests a gateway key, displays the destination, then writes those settings. The third-party default is relevant context, but the source establishes no separate attack behavior.

Static reason

No blocking static signals were detected.

Trigger

The user runs the setup CLI and provides or is prompted for gateway settings.

Impact

Claude Desktop uses the configured gateway for later inference. The inspected source does not establish a separate credential collection or transfer behavior.

Mechanism

The CLI displays the gateway endpoint and stores its URL and gateway API key in Claude Desktop settings.

AI rationale

Evidence

claude_desktop_config.jsonHKCU\SOFTWARE\Policies\Claudecom.anthropic.claudefordesktop

Network endpoints1

api-anthropic.help

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest describes a one-command Claude Desktop setup for a custom third-party inference gateway and points to bin/cli.js.
The manifest defines a start script and no install lifecycle hook.
The CLI defaults to api-anthropic.help and displays the gateway endpoint in its configuration summary.
The CLI prompts for a gateway API key and writes the gateway URL and key into Claude Desktop configuration.

Evidence against

The configured gateway is a third-party endpoint, so later inference traffic will use that service.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 26.2 KB of source, external domains: api-anthropic.help

Source & flagged code

7 flagged

package.jsonView file

1{ "name": "@decoopus/claude-setup", "version": "1.0.6", "description": "One-command setup for Claude Desktop with custom 3P inference gateway", "main": "bin/cli.js", "bin": { "claude-setup": "bin/cli.js", "claude-desktop-setup": "bin/cli.js"

Low

Ai Review Evidence

The manifest describes a one-command Claude Desktop setup for a custom third-party inference gateway and points to bin/cli.js.

package.jsonView on unpkg · L1

15"scripts": { "start": "node ./bin/cli.js" }, "keywords": [ "claude", "claude-desktop", "anthropic", "setup

Low

Suspicious Lifecycle Evidence

The manifest defines a start script and no install lifecycle hook.

package.jsonView on unpkg · L15

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; cons

Low

Ai Review Evidence

The CLI defaults to api-anthropic.help and displays the gateway endpoint in its configuration summary.

bin/cli.jsView on unpkg · L17

710Gateway Endpoint : ${c.terracotta}${gatewayUrl}${c.reset}`); log(` API Key : ${c.sand}●●●●●●●●●● (${apiKey.slice(0, 4)}...${apiKey.slice(-4)})${c.reset}`);

Low

Ai Review Evidence

The CLI defaults to api-anthropic.help and displays the gateway endpoint in its configuration summary.

bin/cli.jsView on unpkg · L710

697Enter your gateway API Key:${c.reset}`); apiKey = await askQuestion(` ${c.sand}API Key: ${c.reset}`); } if (!apiKey) { error('API Key ca

Low

Ai Review Evidence

The CLI prompts for a gateway API key and writes the gateway URL and key into Claude Desktop configuration.

bin/cli.jsView on unpkg · L697

506config.inferenceGatewayBaseUrl = url; config.inferenceGatewayApiKey = apiKey; config.inferenceGatewayAuthScheme = authScheme; config.inferenceModels = DEFAULT_MODELS;

Low

Ai Review Evidence

The CLI prompts for a gateway API key and writes the gateway URL and key into Claude Desktop configuration.

bin/cli.jsView on unpkg · L506

517fs.writeFileSync(targetPath, JSON.stringify(config, null, 2), 'utf8'); return true; } catch (err) { error(`Could not write to ${ta

Low

Ai Review Evidence

The CLI prompts for a gateway API key and writes the gateway URL and key into Claude Desktop configuration.

bin/cli.jsView on unpkg · L517

Source & flagged code

7 flagged · loading source

package.jsonView file

Low

Ai Review Evidence

The manifest describes a one-command Claude Desktop setup for a custom third-party inference gateway and points to bin/cli.js.

package.jsonView on unpkg · L1

15"scripts": { "start": "node ./bin/cli.js" }, "keywords": [ "claude", "claude-desktop", "anthropic", "setup

Low

Suspicious Lifecycle Evidence

The manifest defines a start script and no install lifecycle hook.

package.jsonView on unpkg · L15

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; cons

Low

Ai Review Evidence

Findings

1 Medium10 Low

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowAi Review Evidencepackage.json

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/cli.js

Affected versions and remediation

This report applies to @decoopus/claude-setup@1.0.6.

See all versions of @decoopus/claude-setup for other recorded verdicts.

Review the evidence and your use of @decoopus/claude-setup@1.0.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 11:44:59.137Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.