registry / @deftai/directive-content / 0.107.0

@deftai/directive-content@0.107.0

Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The flagged shell helper is a transparent Git-hook CLI resolver, not a concealed payload. Potentially sensitive actions are explicit task commands, and the manifest contains no install lifecycle execution.

Static reason

No blocking static signals were detected.

Trigger

Explicit `task setup`, `task cloudgov:sync`, or configured Git commit/push.

Impact

No confirmed credential harvesting, exfiltration, remote payload execution, persistence, or destructive behavior.

Mechanism

User-invoked task and repository-local Git hook tooling.

AI rationale

Evidence

package.json.githooks/_deft-run.sh.githooks/pre-commit.githooks/pre-pushTaskfile.ymltasks/engine-invoke.cjstasks/deployments.ymltasks/engine-pm-run.cjs

Network endpoints1

github.com/adhocteam/cloud-gov-instructions/archive/refs/tags/{{.CLOUDGOV_VERSION}}.tar.gz

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

Manifest has no install lifecycle hook, bin, or runtime entrypoint.
Shell hooks run only after explicit Git hook configuration.
Task runner launches CLI with shell:false and removes inherited command transport variables.

Evidence against

Explicit `task setup` sets repository-local core.hooksPath to .githooks.
Explicit cloudgov sync task downloads a pinned GitHub archive.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 40.2 KB of source

Source & flagged code

6 flagged

.githooks/_deft-run.shView file

•path = .githooks/_deft-run.sh kind = payload_in_excluded_dir sizeBytes = 1873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.githooks/_deft-run.shView on unpkg

•path = .githooks/_deft-run.sh kind = build_helper sizeBytes = 1873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.githooks/_deft-run.shView on unpkg

package.jsonView file

1{ "name": "@deftai/directive-content", "version": "0.107.0", "deftConsumerDeposit": true, "description": "Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.", "license": "MIT", "type": "module",

Low

Suspicious Lifecycle Evidence

Manifest has no install lifecycle hook, bin, or runtime entrypoint.

package.jsonView on unpkg · L1

Taskfile.ymlView file

618setup: desc: "Idempotent local-dev setup: configure git hooks (#747); detect-and-prompt ghx (#884). Sets core.hooksPath=.githooks so .githooks/pre-commit + .githooks/pre-push run."

Low

Ai Review Evidence

Shell hooks run only after explicit Git hook configuration.

Taskfile.ymlView on unpkg · L618

tasks/engine-invoke.cjsView file

255// Command transport is one-hop: a spawned CLI may invoke Task again with a // different ENGINE_CMD, which must not be shadowed by this inherited value. const childEnv = { ...process.env }; delete childEnv.DEFT_ENGINE_CMD_JSON; delete childEnv.DEFT_ENGINE_CMD; // stdio inherit (not pipe): piped stdout/stderr deadlocks when the child emits // more than the OS pipe buffer before exit — observed as greenfield smoke // hanging then CI SIGTERM exit 143 with no output (#2554 / #2547). // shell:false is a literal at the call site (not plan.shell) so static // analyzers see a non

Low

Ai Review Evidence

Task runner launches CLI with shell:false and removes inherited command transport variables.

tasks/engine-invoke.cjsView on unpkg · L255

267const result = spawnSync(plan.command, plan.args, { stdio: "inherit", env: childEnv, shell: false, // CREATE_NO_WINDOW: hide console windows from Cursor Task / nested shells (#2563). windowsHide: true, });

Low

Ai Review Evidence

Task runner launches CLI with shell:false and removes inherited command transport variables.

tasks/engine-invoke.cjsView on unpkg · L267

Source & flagged code

6 flagged · loading source

.githooks/_deft-run.shView file

•path = .githooks/_deft-run.sh kind = payload_in_excluded_dir sizeBytes = 1873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.githooks/_deft-run.shView on unpkg

•path = .githooks/_deft-run.sh kind = build_helper sizeBytes = 1873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.githooks/_deft-run.shView on unpkg

package.jsonView file

Findings

1 High3 Medium7 Low

HighPayload In Excluded Dir.githooks/_deft-run.sh

MediumEnvironment Vars

MediumShips Build Helper.githooks/_deft-run.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review EvidenceTaskfile.yml

LowAi Review Evidencetasks/engine-invoke.cjs

Affected versions and remediation

This report applies to @deftai/directive-content@0.107.0.

See all versions of @deftai/directive-content for other recorded verdicts.

Review the evidence and your use of @deftai/directive-content@0.107.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-26 04:09:53.405Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.