registry / @grum-os/cli / 0.3.16
@grum-os/cli@0.3.16
Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package provides an explicit CLI setup path for its Cursor agent integration, which warrants a warning under the agent integration policy. The inspected source does not establish an install-time attack or credential exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the Grum setup or init command for Cursor.
Impact
The setup enables Grum's agent integration in that repository; the inspected evidence does not establish covert or install-time changes.
Mechanism
The CLI writes its hook and MCP configuration and a rule pointer into the repository's Cursor configuration.
AI rationale
The package provides an explicit CLI setup path for its Cursor agent integration, which warrants a warning under the agent integration policy. The inspected source does not establish an install-time attack or credential exfiltration.
Evidence
package.jsongrum.mjs.cursor/hooks.json.cursor/mcp.json.cursor/rules/grum.mdc
Decision evidence
public snapshotAI called this Suspicious at 81.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes grum.mjs as a CLI and declares no npm lifecycle hook.
- The CLI provides an explicit init command that writes Cursor hook and MCP configuration and a rule pointer.
- The implementation writes the Cursor hook and MCP files as part of that setup command.
- The indicated source location identifies a Cursor rule file; this is part of the package's agent integration.
Evidence against
- The inspected setup behavior is invoked through the CLI rather than an npm install hook; no unconsented install-time agent configuration mutation was established.
Behavioral surface
ChildProcessEnvironmentVarsNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggedgrum.mjsView file
112${t.fix}`:""}`).join(`
L113: `)}function uu(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Zs]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last...
L114: `,{mode:384}),Qy(n,384)}function bu(e,t=zt()){nw(ei(e,t),{force:!0})}function ku(e=zt()){let t=Ln.join(Yr(e),"credentials"),n;try{n=tw(t).filter(r=>r.endsWith(".json"))}catch{retur...
High
110L111: ${Qc(n,!1)}`}}var Xs="Grum refreshes review decisions before each MCP check or review-status lookup. If it cannot refresh, current review statuses and blocking findings are unknown...
L112: ${t.fix}`:""}`).join(`
L113: `)}function uu(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Zs]:[]]),a=Object.keys(s).sort((l,c)=>l===o?.last...
L114: `,{mode:384}),Qy(n,384)}function bu(e,t=zt()){nw(ei(e,t),{force:!0})}function ku(e=zt()){let t=Ln.join(Yr(e),"credentials"),n;try{n=tw(t).filter(r=>r.endsWith(".json"))}catch{retur...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
grum.mjsView on unpkg · L110310L311: `),f.start("Waiting for URL above to load"));let g=Math.min(Date.parse(c.expiresAt),Date.now()+(n.timeoutMs??600*1e3));for(;Date.now()<g;){n.signal?.throwIfAborted();let y=await o(...
L312: `),h=k,f.start("Waiting for review capture"))}await(n.sleep??(C=>new Promise((k,$)=>{if(n.signal?.aborted){$(n.signal.reason);return}let R=setTimeout(A,C);function A(){n.signal?.re...
L313: `);let o={},s={};for(let i of e.items)try{let a=await co({projectId:e.projectId,title:i.label,pages:[i.page],query:i.query,authRequired:e.authRequired},t,n);"captures"in a?s[i.key]...
L314: `)}else if(!c.authRequired)throw new Error(c.error||"It wasn't found on that page. Pass the page where it appears with --url.")}let s=r.filter(l=>!xn(l));if(!s.length)throw new Err...
L315: Start the app or check that
Findings
4 High6 Medium2 Low
HighChild Processgrum.mjs
HighSame File Env Network Executiongrum.mjs
HighCommand Output Exfiltrationgrum.mjs
HighTrigger Reachable Command Output Exfiltrationgrum.mjs
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencegrum.mjs
MediumAi Review Evidencegrum.mjs
MediumAi Review Evidencegrum.mjs
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @grum-os/cli@0.3.16.
See all versions of @grum-os/cli for other recorded verdicts.
- Review the evidence and your use of @grum-os/cli@0.3.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.