registry / @decoopus/claude-setup / 1.0.8

@decoopus/claude-setup@1.0.8

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The inspected source implements an explicitly described, user-invoked third-party gateway setup and stores the API key supplied for that configuration. No install-time trigger or separate credential exfiltration behavior was found.

Static reason

No blocking static signals were detected.

Trigger

A user runs the setup CLI and completes its prompts.

Impact

Claude Desktop is configured to use that gateway; the package source does not establish a separate credential transfer or other attack.

Mechanism

The CLI saves the supplied key and gateway URL in Claude Desktop configuration; the gateway defaults to the listed endpoint but can be overridden.

AI rationale

Evidence

bin/cli.jspackage.json

Network endpoints1

api-anthropic.help

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes bin/cli.js as the setup command and lists only a start script, with no install lifecycle hook.
The CLI describes its purpose as configuring Claude Desktop with a third-party inference gateway and defaults that gateway to https://api-anthropic.help.
When run, the CLI prompts for an API key and stores the supplied key and gateway URL in Claude Desktop configuration.
The gateway URL can be overridden with a command-line option; the reviewed CLI source contains no code that sends the key over the network.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 25.0 KB of source, external domains: api-anthropic.help

Source & flagged code

6 flagged

package.jsonView file

4"description": "One-command setup for Claude Desktop with custom 3P inference gateway", "main": "bin/cli.js", "bin": { "claude-desktop-setup": "bin/cli.js", "claude-setup": "bin/cli.js" },

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js as the setup command and lists only a start script, with no install lifecycle hook.

package.jsonView on unpkg · L4

15"scripts": { "start": "node ./bin/cli.js" }, "keywords": [ "claude",

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js as the setup command and lists only a start script, with no install lifecycle hook.

package.jsonView on unpkg · L15

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; const DEFAULT_MODELS = [ { n

Low

Ai Review Evidence

The CLI describes its purpose as configuring Claude Desktop with a third-party inference gateway and defaults that gateway to https://api-anthropic.help.

bin/cli.jsView on unpkg · L17

695// Prompt 2: API Key if (!apiKey) { log(`\n ${c.terracotta}✳${c.reset} ${c.creamBold}Enter your API Key:${c.reset}`); apiKey = await askQuestion(` ${c.sand}API Key: ${c.reset}`); } if (!apiKey) { error('API Key cannot be empty. Setup aborted.'); process.exit(1); } gatewayUrl = normalizeUrl(gatewayUrl); // Step 1: Ensure Claude

Low

Ai Review Evidence

When run, the CLI prompts for an API key and stores the supplied key and gateway URL in Claude Desktop configuration.

bin/cli.jsView on unpkg · L695

506config.inferenceGatewayBaseUrl = url; config.inferenceGatewayApiKey = apiKey; config.inferenceGatewayAuthScheme = authScheme; config.inferenceModels = DEFAULT_MODELS; // Display Identity config.deploymentDisplayName = email; config.deploymentDisplaySubtitle = 'Claude Max 20x';

Low

Ai Review Evidence

When run, the CLI prompts for an API key and stores the supplied key and gateway URL in Claude Desktop configuration.

bin/cli.jsView on unpkg · L506

633gatewayUrl = args[++i] || DEFAULT_GATEWAY_URL; } else if (!arg.startsWith('-')) { if (!apiKey) { apiKey = arg; }

Low

Ai Review Evidence

The gateway URL can be overridden with a command-line option; the reviewed CLI source contains no code that sends the key over the network.

bin/cli.jsView on unpkg · L633

Source & flagged code

6 flagged · loading source

package.jsonView file

4"description": "One-command setup for Claude Desktop with custom 3P inference gateway", "main": "bin/cli.js", "bin": { "claude-desktop-setup": "bin/cli.js", "claude-setup": "bin/cli.js" },

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js as the setup command and lists only a start script, with no install lifecycle hook.

package.jsonView on unpkg · L4

15"scripts": { "start": "node ./bin/cli.js" }, "keywords": [ "claude",

Low

Suspicious Lifecycle Evidence

package.json exposes bin/cli.js as the setup command and lists only a start script, with no install lifecycle hook.

package.jsonView on unpkg · L15

bin/cli.jsView file

17const DEFAULT_GATEWAY_URL = 'https://api-anthropic.help'; const DEFAULT_AUTH_SCHEME = 'bearer'; const DEFAULT_MODELS = [ { n

Low

Ai Review Evidence

The CLI describes its purpose as configuring Claude Desktop with a third-party inference gateway and defaults that gateway to https://api-anthropic.help.

Findings

1 Medium9 Low

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/cli.js

Affected versions and remediation

This report applies to @decoopus/claude-setup@1.0.8.

See all versions of @decoopus/claude-setup for other recorded verdicts.

Review the evidence and your use of @decoopus/claude-setup@1.0.8 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 11:47:20.806Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.