registry / @grum-os/cli / 0.3.13
@grum-os/cli@0.3.13
Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe suspicious scanner signals map to a bundled CLI with command execution and service network calls, but the inspected evidence shows package-aligned behavior and no install-time trigger or unrelated credential destination. Mark clean.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes a CLI command such as setup or capture reset.
Impact
No confirmed attack surface was established from the reviewed source.
Mechanism
The command uses the Grum service API and package-owned project integration; no install hook or unrelated credential recipient was found in the inspected paths.
AI rationale
The suspicious scanner signals map to a bundled CLI with command execution and service network calls, but the inspected evidence shows package-aligned behavior and no install-time trigger or unrelated credential destination. Mark clean.
Evidence
package.jsongrum.mjs
Network endpoints1
app.grum.so
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes `grum.mjs` as a CLI and declares no lifecycle scripts.
- The cited integration location identifies `.cursor/rules/grum.mdc` as a Grum rule path.
- The CLI sends bearer-authenticated requests to the fixed Grum API origin; the inspected code shows no unrelated recipient.
- Setup and capture reset are CLI commands, not install-time triggers.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggedgrum.mjsView file
109${t.fix}`:""}`).join(`
L110: `)}function yc(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[gs]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last...
L111: `,{mode:384}),Wh(n,384)}function Ic(e,t=xr()){Hh(ys(e,t),{force:!0})}var L=Ac("https://app.grum.so"),At=globalThis.__GRUM_VERSION__??"0.0.0-dev",vr="@grum-os/cli",ws=`node ${Kh(imp...
High
107L108: ${cc(n,!1)}`}}var Lh="2025-06-18",Rt=e=>`Check before you finish. ${ar(e)}`,Dh=e=>({grum_contract:`Grum design contract: this repository's design contract as reviewed in Grum: its ...
L109: ${t.fix}`:""}`).join(`
L110: `)}function yc(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[gs]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last...
L111: `,{mode:384}),Wh(n,384)}function Ic(e,t=xr()){Hh(ys(e,t),{force:!0})}var L=Ac("https://app.grum.so"),At=globalThis.__GRUM_VERSION__??"0.0.0-dev",vr="@grum-os/cli",ws=`node ${Kh(imp...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
grum.mjsView on unpkg · L107304L305: `),f.start("Waiting for URL above to load"));let m=Math.min(Date.parse(c.expiresAt),Date.now()+(n.timeoutMs??600*1e3));for(;Date.now()<m;){n.signal?.throwIfAborted();let w=await o(...
L306: `),h=S,f.start("Waiting for review capture"))}await(n.sleep??(C=>new Promise((S,E)=>{if(n.signal?.aborted){E(n.signal.reason);return}let _=setTimeout(R,C);function R(){n.signal?.re...
L307: `);let o={},s={};for(let i of e.items)try{let a=await jr({projectId:e.projectId,title:i.label,pages:[i.page],query:i.query,authRequired:e.authRequired},t,n);"captures"in a?s[i.key]...
...
L309: Start the app or check that this URL is available, then try again.`}}finally{await a.close(),ju(i,{recursive:!0,force:!0})}}async function Qy(e,t,n,r,o=!0){if(n)try{await e.evaluat...
L310: ; return 0; })()`,!1)}c
Findings
4 High2 Medium6 Low
HighChild Processgrum.mjs
HighSame File Env Network Executiongrum.mjs
HighCommand Output Exfiltrationgrum.mjs
HighTrigger Reachable Command Output Exfiltrationgrum.mjs
MediumNetwork
MediumEnvironment Vars
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencegrum.mjs
LowAi Review Evidencegrum.mjs
LowAi Review Evidencegrum.mjs
Affected versions and remediation
This report applies to @grum-os/cli@0.3.13.
See all versions of @grum-os/cli for other recorded verdicts.
- Review the evidence and your use of @grum-os/cli@0.3.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.