registry / @grum-os/cli / 0.3.14

@grum-os/cli@0.3.14

Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.

AI Security Review

scanned 18d ago · by lpm-firewall-ai

The manifest declares a CLI entrypoint and no lifecycle hooks. The inspected process and network behavior matches repository review and capture functions, with no evidence of unrelated credential transfer or malicious installation behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the grum CLI or a configured integration invokes it.

Impact

No confirmed attack surface was established from the inspected source.

Mechanism

The CLI reads repository state and uses a saved Grum session for requests to the Grum service; no unrelated credential recipient or install-time action was established.

AI rationale

Network endpoints1

app.grum.so

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes grum.mjs as a CLI and contains no npm lifecycle hook.
The flagged agent configuration location is part of a Cursor rule-path list; the manifest does not run it during installation.
The CLI reads repository data through git and sends authenticated requests through its Grum API client, consistent with its design-review functions.
The inspected capture request sends data to the origin associated with the saved Grum session.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 577 KB of source, external domains: app.grum.so, chromewebstore.google.com, example.com, fonts.gstatic.com, nodejs.org, www.w3.org

Source & flagged code

8 flagged

grum.mjsView file

111${t.fix}`:""}`).join(` L112: `)}function zc(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Us]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last... L113: `,{mode:384}),jy(n,384)}function nu(e,t=Lt()){Py(Ws(e,t),{force:!0})}function ru(e=Lt()){let t=$n.join(Fr(e),"credentials"),n;try{n=Oy(t).filter(r=>r.endsWith(".json"))}catch{retur...

High

Child Process

Package source references child process execution.

grum.mjsView on unpkg · L111

109L110: ${Dc(n,!1)}`}}var vy="2025-06-18",Pt=e=>`Check before you finish. ${br(e)}`,Cy=e=>({grum_contract:`Grum design contract: this repository's design contract as reviewed in Grum: its ... L111: ${t.fix}`:""}`).join(` L112: `)}function zc(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Us]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last... L113: `,{mode:384}),jy(n,384)}function nu(e,t=Lt()){Py(Ws(e,t),{force:!0})}function ru(e=Lt()){let t=$n.join(Fr(e),"credentials"),n;try{n=Oy(t).filter(r=>r.endsWith(".json"))}catch{retur...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

grum.mjsView on unpkg · L109

309L310: `),g.start("Waiting for URL above to load"));let m=Math.min(Date.parse(c.expiresAt),Date.now()+(n.timeoutMs??600*1e3));for(;Date.now()<m;){n.signal?.throwIfAborted();let w=await o(... L311: `),h=S,g.start("Waiting for review capture"))}await(n.sleep??(C=>new Promise((S,E)=>{if(n.signal?.aborted){E(n.signal.reason);return}let _=setTimeout(R,C);function R(){n.signal?.re... L312: `);let o={},s={};for(let i of e.items)try{let a=await Xr({projectId:e.projectId,title:i.label,pages:[i.page],query:i.query,authRequired:e.authRequired},t,n);"captures"in a?s[i.key]... ... L314: Start the app or check that this URL is available, then try again.`}}finally{await a.close(),lp(i,{recursive:!0,force:!0})}}async function Uw(e,t,n,r,o=!0){if(n)try{await e.evaluat... L315: ; return 0; })()`,!1)}c

Findings

4 High2 Medium6 Low

HighChild Processgrum.mjs

HighSame File Env Network Executiongrum.mjs

HighCommand Output Exfiltrationgrum.mjs

HighTrigger Reachable Command Output Exfiltrationgrum.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencegrum.mjs

Affected versions and remediation

This report applies to @grum-os/cli@0.3.14.

See all versions of @grum-os/cli for other recorded verdicts.

Review the evidence and your use of @grum-os/cli@0.3.14 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 03:41:44.605Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @grum-os/cli / 0.3.14

@grum-os/cli@0.3.14

Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.

AI Security Review

scanned 18d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the grum CLI or a configured integration invokes it.

Impact

No confirmed attack surface was established from the inspected source.

Mechanism

The CLI reads repository state and uses a saved Grum session for requests to the Grum service; no unrelated credential recipient or install-time action was established.

AI rationale

Network endpoints1

app.grum.so

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes grum.mjs as a CLI and contains no npm lifecycle hook.
The flagged agent configuration location is part of a Cursor rule-path list; the manifest does not run it during installation.
The CLI reads repository data through git and sends authenticated requests through its Grum API client, consistent with its design-review functions.
The inspected capture request sends data to the origin associated with the saved Grum session.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 577 KB of source, external domains: app.grum.so, chromewebstore.google.com, example.com, fonts.gstatic.com, nodejs.org, www.w3.org

Source & flagged code

8 flagged

grum.mjsView file

High

Child Process

Package source references child process execution.

grum.mjsView on unpkg · L111

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

grum.mjsView on unpkg · L109

Findings

4 High2 Medium6 Low

HighChild Processgrum.mjs

HighSame File Env Network Executiongrum.mjs

HighCommand Output Exfiltrationgrum.mjs

HighTrigger Reachable Command Output Exfiltrationgrum.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencegrum.mjs

Affected versions and remediation

This report applies to @grum-os/cli@0.3.14.

See all versions of @grum-os/cli for other recorded verdicts.

Review the evidence and your use of @grum-os/cli@0.3.14 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-18 03:41:44.605Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.