registry / @grum-os/cli / 0.3.32

@grum-os/cli@0.3.32

Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

The package exposes a CLI without install lifecycle scripts. Source inspection resolves the scanner signals to Git repository checks, Grum API traffic, and user-confirmed project setup, with no confirmed attack surface.

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes the CLI; Cursor agent setup proceeds only after an affirmative response.

Impact

No confirmed malicious effect or unconsented agent control change was found.

Mechanism

The CLI runs Git inspection commands and makes Grum API requests. Its setup writes project-local Cursor hooks, MCP configuration, and a Grum design rule.

AI rationale

Evidence

.cursor/hooks.json.cursor/mcp.json.cursor/rules/grum.mdc

Network endpoints1

app.grum.so

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes grum.mjs as the CLI binary and has no lifecycle script.
The flagged synchronous child process calls run Git inspection commands in a repository and capture their output for repository status and diff checks.
The HTTP wrapper sends requests to the Grum API origin; the default origin is app.grum.so.
Cursor agent setup is user-invoked and asks for affirmative confirmation before installation.
The indicated Cursor rule is a project-local Grum design rule for styling files, not a broad agent configuration destination.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 764 KB of source, external domains: app.grum.so, chromewebstore.google.com, example.com, fonts.gstatic.com, nodejs.org, www.w3.org

Source & flagged code

8 flagged

grum.mjsView file

139${t.fix}`:""}`}).join(` L140: `)}function Qg(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Kl]:[]]),l=Object.keys(s).sort((a,c)=>a===o?.last... L141: `,{mode:384}),nC(n,384)}function lm(e,t=rr()){sC(Ql(e,t),{force:!0})}function cm(e=rr()){let t=no.join(Hs(e),"credentials"),n;try{n=oC(t).filter(r=>r.endsWith(".json"))}catch{retur...

High

Child Process

Package source references child process execution.

grum.mjsView on unpkg · L139

137L138: ${Gg(n,!1,!1,s)}`}}var Jl="Grum refreshes review decisions before each MCP check or review-status lookup. If it cannot refresh, current review statuses and blocking findings are un... L139: ${t.fix}`:""}`}).join(` L140: `)}function Qg(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Kl]:[]]),l=Object.keys(s).sort((a,c)=>a===o?.last... L141: `,{mode:384}),nC(n,384)}function lm(e,t=rr()){sC(Ql(e,t),{force:!0})}function cm(e=rr()){let t=no.join(Hs(e),"credentials"),n;try{n=oC(t).filter(r=>r.endsWith(".json"))}catch{retur...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

grum.mjsView on unpkg · L137

Findings

4 High2 Medium6 Low

HighChild Processgrum.mjs

HighSame File Env Network Executiongrum.mjs

HighCommand Output Exfiltrationgrum.mjs

HighTrigger Reachable Command Output Exfiltrationgrum.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencegrum.mjs

Affected versions and remediation

This report applies to @grum-os/cli@0.3.32.

See all versions of @grum-os/cli for other recorded verdicts.

Review the evidence and your use of @grum-os/cli@0.3.32 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 16:50:05.284Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @grum-os/cli / 0.3.32

@grum-os/cli@0.3.32

Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes the CLI; Cursor agent setup proceeds only after an affirmative response.

Impact

No confirmed malicious effect or unconsented agent control change was found.

Mechanism

The CLI runs Git inspection commands and makes Grum API requests. Its setup writes project-local Cursor hooks, MCP configuration, and a Grum design rule.

AI rationale

Evidence

.cursor/hooks.json.cursor/mcp.json.cursor/rules/grum.mdc

Network endpoints1

app.grum.so

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes grum.mjs as the CLI binary and has no lifecycle script.
The flagged synchronous child process calls run Git inspection commands in a repository and capture their output for repository status and diff checks.
The HTTP wrapper sends requests to the Grum API origin; the default origin is app.grum.so.
Cursor agent setup is user-invoked and asks for affirmative confirmation before installation.
The indicated Cursor rule is a project-local Grum design rule for styling files, not a broad agent configuration destination.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 764 KB of source, external domains: app.grum.so, chromewebstore.google.com, example.com, fonts.gstatic.com, nodejs.org, www.w3.org

Source & flagged code

8 flagged

grum.mjsView file

High

Child Process

Package source references child process execution.

grum.mjsView on unpkg · L139

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

grum.mjsView on unpkg · L137

Findings

4 High2 Medium6 Low

HighChild Processgrum.mjs

HighSame File Env Network Executiongrum.mjs

HighCommand Output Exfiltrationgrum.mjs

HighTrigger Reachable Command Output Exfiltrationgrum.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencegrum.mjs

Affected versions and remediation

This report applies to @grum-os/cli@0.3.32.

See all versions of @grum-os/cli for other recorded verdicts.

Review the evidence and your use of @grum-os/cli@0.3.32 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 16:50:05.284Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.