registry / @deftai/directive-content / 0.119.10

@deftai/directive-content@0.119.10

Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.

AI Security Review

scanned 14d ago · by lpm-firewall-ai

The manifest has no install-time lifecycle hook, and the inspected hook helper only resolves the `deft` CLI. The test file's process spawning is part of test setup; these inspected source facts support a clean verdict.

Static reason

No blocking static signals were detected.

Trigger

No malicious trigger was identified; the hook helper runs when called by a hook.

Impact

No confirmed attack surface or harmful impact was established.

Mechanism

The inspected helper selects the local or global `deft` CLI; the manifest has no install-time lifecycle hook.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json defines only prepack and postpack scripts; no install-time lifecycle hook is present.
The hook helper routes commands to the local or global `deft` CLI based on repository state.
The test file uses `spawnSync` to run its test helper with a controlled environment.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 49.1 KB of source

Source & flagged code

6 flagged

.githooks/_deft-run.shView file

Lines 1-36text

1# Shared deft CLI resolver for .githooks/* (#2067, #2248).

2# REPO_ROOT must be set before sourcing.

4# Resolution order:

5# 1. DEFT_HOOKS_PREFER_GLOBAL=1 forces the global `deft` (escape hatch, #2248).

6# 2. Framework-source (monorepo) checkout: prefer the freshly-built LOCAL CLI

7# (packages/cli/dist/bin.js) over a possibly-stale global `deft`, so a

8# newly-added-and-wired verb is not unknown to the global and does not

9# block commits/pushes (#2248). Detected via the built local CLI existing

10# under $REPO_ROOT together with a monorepo sentinel (pnpm-workspace.yaml).

11# 3. Consumer install (vendored .deft/core, no local build): resolve the

12# global `deft` exactly as before -- consumers have no local CLI to prefer.

13# 4. Local build present without the monorepo sentinel: fall back to it.

14# 5. Nothing resolvable: fail with an install hint.

16run_deft() {

17 _deft_local="$REPO_ROOT/packages/cli/dist/bin.js"

19 # (1) Escape hatch: force the global even in a monorepo.

20 if [ "${DEFT_HOOKS_PREFER_GLOBAL:-}" = "1" ] && command -v deft >/dev/null 2>&1; then

Low

Ai Review Evidence

The hook helper routes commands to the local or global `deft` CLI based on repository state.

.githooks/_deft-run.shView on unpkg · L16

21 deft "$@"

22 return $?

23 fi

25 # (2) Framework-source checkout: the local build is authoritative for verbs.

26 if [ -f "$_deft_local" ] && [ -f "$REPO_ROOT/pnpm-workspace.yaml" ]; then

27 node "$_deft_local" "$@"

28 return $?

29 fi

31 # (3) Consumer install: resolve the global `deft` exactly as today.

32 if command -v deft >/dev/null 2>&1; then

33 deft "$@"

34 return $?

35 fi

•path = .githooks/_deft-run.sh kind = payload_in_excluded_dir sizeBytes = 1873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.githooks/_deft-run.shView on unpkg

•path = .githooks/_deft-run.sh kind = build_helper sizeBytes = 1873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.githooks/_deft-run.shView on unpkg

tasks/engine-invoke.test.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

tasks/engine-invoke.test.cjs#virtual:normalized:round1View on unpkg

package.jsonView file

Lines 1-26json

2 "name": "@deftai/directive-content",

3 "version": "0.119.10",

4 "deftConsumerDeposit": true,

5 "description": "Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.",

tasks/engine-invoke.test.cjsView file

Lines 220-260javascript

220 "Set-Content -LiteralPath $env:DEFT_ARGV_OUT -Value $parent.CommandLine -Encoding utf8",

221 "",

222 ].join("\r\n"),

223 "utf8",

224 );

225 writeFileSync(shim,

Source & flagged code

6 flagged · loading source

.githooks/_deft-run.shView file

•path = .githooks/_deft-run.sh kind = payload_in_excluded_dir sizeBytes = 1873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.githooks/_deft-run.shView on unpkg

•path = .githooks/_deft-run.sh kind = build_helper sizeBytes = 1873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.githooks/_deft-run.shView on unpkg

16run_deft() { _deft_local="$REPO_ROOT/packages/cli/dist/bin.js" # (1) Escape hatch: force the global even in a monorepo. if [ "${DEFT_HOOKS_PREFER_GLOBAL:-}" = "1" ] && command -

Low

Ai Review Evidence

The hook helper routes commands to the local or global `deft` CLI based on repository state.

.githooks/_deft-run.shView on unpkg · L16

Findings

2 High3 Medium6 Low

HighPayload In Excluded Dir.githooks/_deft-run.sh

HighSemantic Analysis Limitedtasks/engine-invoke.test.cjs#virtual:normalized:round1

MediumEnvironment Vars

MediumShips Build Helper.githooks/_deft-run.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidence.githooks/_deft-run.sh

LowAi Review Evidencetasks/engine-invoke.test.cjs

Affected versions and remediation

This report applies to @deftai/directive-content@0.119.10.

See all versions of @deftai/directive-content for other recorded verdicts.

Review the evidence and your use of @deftai/directive-content@0.119.10 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 15:49:58.874Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.