registry / @grum-os/cli / 0.3.15
@grum-os/cli@0.3.15
Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe package manifest declares a CLI entrypoint but no npm lifecycle hook. The flagged agent setup is an explicit or user-confirmed CLI flow, and the inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Invoking the Grum CLI and choosing or requesting Cursor setup.
Impact
The inspected behavior does not establish unauthorized control-surface changes or a concrete attack.
Mechanism
The setup flow offers to install Grum's Cursor integration and proceeds only after the applicable user choice or explicit setup action.
AI rationale
The package manifest declares a CLI entrypoint but no npm lifecycle hook. The flagged agent setup is an explicit or user-confirmed CLI flow, and the inspected source does not establish malicious behavior.
Evidence
grum.mjs
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes grum.mjs as a CLI entrypoint and declares no install lifecycle hook.
- The flagged source location identifies a Grum-owned Cursor rules file within the agent integration code.
- Cursor setup is conditional on an interactive user choice or an explicit setup action; the inspected code does not establish an unconsented install-time mutation.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggedgrum.mjsView file
111${t.fix}`:""}`).join(`
L112: `)}function Zc(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Ws]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last...
L113: `,{mode:384}),Uy(n,384)}function cu(e,t=Mt()){Wy(Hs(e,t),{force:!0})}function uu(e=Mt()){let t=An.join(zr(e),"credentials"),n;try{n=Gy(t).filter(r=>r.endsWith(".json"))}catch{retur...
High
109L110: ${Wc(n,!1)}`}}var Ty="2025-06-18",Dt=e=>`Check before you finish. ${Sr(e)}`,jy=e=>({grum_contract:`Grum design contract: this repository's design contract as reviewed in Grum: its ...
L111: ${t.fix}`:""}`).join(`
L112: `)}function Zc(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Ws]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last...
L113: `,{mode:384}),Uy(n,384)}function cu(e,t=Mt()){Wy(Hs(e,t),{force:!0})}function uu(e=Mt()){let t=An.join(zr(e),"credentials"),n;try{n=Gy(t).filter(r=>r.endsWith(".json"))}catch{retur...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
grum.mjsView on unpkg · L109309L310: `),f.start("Waiting for URL above to load"));let m=Math.min(Date.parse(c.expiresAt),Date.now()+(n.timeoutMs??600*1e3));for(;Date.now()<m;){n.signal?.throwIfAborted();let w=await o(...
L311: `),h=S,f.start("Waiting for review capture"))}await(n.sleep??(C=>new Promise((S,E)=>{if(n.signal?.aborted){E(n.signal.reason);return}let I=setTimeout(R,C);function R(){n.signal?.re...
L312: `);let o={},s={};for(let i of e.items)try{let a=await to({projectId:e.projectId,title:i.label,pages:[i.page],query:i.query,authRequired:e.authRequired},t,n);"captures"in a?s[i.key]...
L313: `)}else if(!c.authRequired)throw new Error(c.error||"It wasn't found on that page. Pass the page where it appears with --url.")}let s=r.filter(l=>!fn(l));if(!s.length)throw new Err...
L314: Start the app or check that
Findings
4 High2 Medium5 Low
HighChild Processgrum.mjs
HighSame File Env Network Executiongrum.mjs
HighCommand Output Exfiltrationgrum.mjs
HighTrigger Reachable Command Output Exfiltrationgrum.mjs
MediumNetwork
MediumEnvironment Vars
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencegrum.mjs
LowAi Review Evidencegrum.mjs
Affected versions and remediation
This report applies to @grum-os/cli@0.3.15.
See all versions of @grum-os/cli for other recorded verdicts.
- Review the evidence and your use of @grum-os/cli@0.3.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.