registry / @deftai/directive-content / 0.123.0

@deftai/directive-content@0.123.0

Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The inspected manifest has no install lifecycle hook, and the reviewed hook and engine code resolve and invoke the CLI without a confirmed malicious behavior. The scanner hints did not establish an attack in the required source paths.

Static reason

No blocking static signals were detected.

Trigger

The packaging scripts run during packaging; the shared hook resolver runs when a repository hook invokes it.

Impact

No confirmed malicious effect or attack surface was established.

Mechanism

The hook resolver selects a local or global CLI. The engine helper passes arguments to a child process with shell disabled.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json defines prepack and postpack scripts, with no install lifecycle hook.
The shared hook resolver invokes a local or global deft CLI based on availability and an explicit preference variable.
The engine-invocation test spawns the helper with test arguments supplied through its environment.
The runtime helper removes its command transport variables from the child environment and spawns with shell disabled.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 49.1 KB of source

Source & flagged code

7 flagged

.githooks/_deft-run.shView file

Lines 1-36text

1# Shared deft CLI resolver for .githooks/* (#2067, #2248).

2# REPO_ROOT must be set before sourcing.

4# Resolution order:

5# 1. DEFT_HOOKS_PREFER_GLOBAL=1 forces the global `deft` (escape hatch, #2248).

6# 2. Framework-source (monorepo) checkout: prefer the freshly-built LOCAL CLI

7# (packages/cli/dist/bin.js) over a possibly-stale global `deft`, so a

8# newly-added-and-wired verb is not unknown to the global and does not

9# block commits/pushes (#2248). Detected via the built local CLI existing

10# under $REPO_ROOT together with a monorepo sentinel (pnpm-workspace.yaml).

11# 3. Consumer install (vendored .deft/core, no local build): resolve the

12# global `deft` exactly as before -- consumers have no local CLI to prefer.

13# 4. Local build present without the monorepo sentinel: fall back to it.

14# 5. Nothing resolvable: fail with an install hint.

16run_deft() {

17 _deft_local="$REPO_ROOT/packages/cli/dist/bin.js"

19 # (1) Escape hatch: force the global even in a monorepo.

20 if [ "${DEFT_HOOKS_PREFER_GLOBAL:-}" = "1" ] && command -v deft >/dev/null 2>&1; then

Low

Ai Review Evidence

The shared hook resolver invokes a local or global deft CLI based on availability and an explicit preference variable.

.githooks/_deft-run.shView on unpkg · L16

21 deft "$@"

22 return $?

23 fi

25 # (2) Framework-source checkout: the local build is authoritative for verbs.

26 if [ -f "$_deft_local" ] && [ -f "$REPO_ROOT/pnpm-workspace.yaml" ]; then

27 node "$_deft_local" "$@"

28 return $?

29 fi

31 # (3) Consumer install: resolve the global `deft` exactly as today.

32 if command -v deft >/dev/null 2>&1; then

33 deft "$@"

34 return $?

35 fi

•path = .githooks/_deft-run.sh kind = payload_in_excluded_dir sizeBytes = 1873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.githooks/_deft-run.shView on unpkg

•path = .githooks/_deft-run.sh kind = build_helper sizeBytes = 1873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.githooks/_deft-run.shView on unpkg

tasks/engine-invoke.test.cjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

tasks/engine-invoke.test.cjs#virtual:normalized:round1View on unpkg

package.jsonView file

Lines 1-26json

2 "name": "@deftai/directive-content",

3 "version": "0.123.0",

4 "deftConsumerDeposit": true,

5 "description": "Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.",

tasks/engine-invoke.test.cjsView file

Lines 219-259javascript

219 '$parent = Get-CimInstance Win32_Process -Filter "ProcessId=$($me.ParentProcessId)"',

220 "Set-Content -LiteralPath $env:DEFT_ARGV_OUT -Value $parent.CommandLine -Encoding utf8",

221 "",

222 ].join("\r\n"),

223 "utf8",

224

tasks/engine-invoke.cjsView file

Lines 235-275javascript

235 } else {

236 cmdLine = String(process.env.DEFT_ENGINE_CMD || "");

237 }

238 cmdLine = cmdLine.trim();

239 const

Source & flagged code

7 flagged · loading source

.githooks/_deft-run.shView file

•path = .githooks/_deft-run.sh kind = payload_in_excluded_dir sizeBytes = 1873 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.githooks/_deft-run.shView on unpkg

•path = .githooks/_deft-run.sh kind = build_helper sizeBytes = 1873 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.githooks/_deft-run.shView on unpkg

16run_deft() { _deft_local="$REPO_ROOT/packages/cli/dist/bin.js" # (1) Escape hatch: force the global even in a monorepo. if [ "${DEFT_HOOKS_PREFER_GLOBAL:-}" = "1" ] && command

Low

Ai Review Evidence

The shared hook resolver invokes a local or global deft CLI based on availability and an explicit preference variable.

.githooks/_deft-run.shView on unpkg · L16

Findings

2 High3 Medium7 Low

HighPayload In Excluded Dir.githooks/_deft-run.sh

HighSemantic Analysis Limitedtasks/engine-invoke.test.cjs#virtual:normalized:round1

MediumEnvironment Vars

MediumShips Build Helper.githooks/_deft-run.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidence.githooks/_deft-run.sh

LowAi Review Evidencetasks/engine-invoke.test.cjs

LowAi Review Evidencetasks/engine-invoke.cjs

Affected versions and remediation

This report applies to @deftai/directive-content@0.123.0.

See all versions of @deftai/directive-content for other recorded verdicts.

Review the evidence and your use of @deftai/directive-content@0.123.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 15:50:23.837Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.