registry / @grum-os/cli / 0.3.33

@grum-os/cli@0.3.33

Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the required agent-related source location is design analysis code. The flagged Git and network calls are tied to ordinary CLI functions, with reporting gated by explicit options and authentication.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the CLI; project agent configuration changes occur through the setup command.

Impact

No harmful effect was established from these behaviors.

Mechanism

The CLI runs fixed Git metadata queries, and submits report data only when signed in and invoked with --ci or --report. Setup writes project Cursor configuration files.

AI rationale

Evidence

.cursor/hooks.json.cursor/mcp.json.cursor/rules/grum.mdc

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json identifies grum.mjs as the CLI entrypoint and declares no lifecycle hook.
The required grum.mjs location classifies design style findings; it does not perform agent configuration writes.
The CLI routes the explicit setup command to setup logic, which writes project Cursor configuration files.
Git execution uses fixed Git commands to read repository status and metadata, without shell evaluation.
Authenticated report submission is gated by the explicit --ci or --report option.

Evidence against

The bundle uses child processes and network requests, but the inspected callers tie them to Git metadata collection and Grum product reporting.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 764 KB of source, external domains: app.grum.so, chromewebstore.google.com, example.com, fonts.gstatic.com, nodejs.org, www.w3.org

Source & flagged code

8 flagged

grum.mjsView file

139${t.fix}`:""}`}).join(` L140: `)}function Qg(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Kl]:[]]),l=Object.keys(s).sort((a,c)=>a===o?.last... L141: `,{mode:384}),nC(n,384)}function lm(e,t=rr()){sC(Ql(e,t),{force:!0})}function cm(e=rr()){let t=no.join(Hs(e),"credentials"),n;try{n=oC(t).filter(r=>r.endsWith(".json"))}catch{retur...

High

Child Process

Package source references child process execution.

grum.mjsView on unpkg · L139

137L138: ${Gg(n,!1,!1,s)}`}}var Jl="Grum refreshes review decisions before each MCP check or review-status lookup. If it cannot refresh, current review statuses and blocking findings are un... L139: ${t.fix}`:""}`}).join(` L140: `)}function Qg(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Kl]:[]]),l=Object.keys(s).sort((a,c)=>a===o?.last... L141: `,{mode:384}),nC(n,384)}function lm(e,t=rr()){sC(Ql(e,t),{force:!0})}function cm(e=rr()){let t=no.join(Hs(e),"credentials"),n;try{n=oC(t).filter(r=>r.endsWith(".json"))}catch{retur...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

grum.mjsView on unpkg · L137

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

grum.mjsView on unpkg · L137

137Trigger-reachable command-output exfiltration chain: manifest.bin -> grum.mjs L137: L138: ${Gg(n,!1,!1,s)}`}}var Jl="Grum refreshes review decisions before each MCP check or review-status lookup. If it cannot refresh, current review statuses and blocking findings are un... L139: ${t.fix}`:""}`}).join(` L140: `)}function Qg(e,t,n,r){let o=e?.profile,s=o?.info_cache;if(!s||typeof s!="object")return null;let i=new Set([...n,...r==="store"?[Kl]:[]]),l=Object.keys(s).sort((a,c)=>a===o?.last... L141: `,{mode:384}),nC(n,384)}function lm(e,t=rr()){sC(Ql(e,t),{force:!0})}function cm(e=rr()){let t=no.join(Hs(e),"credentials"),n;try{n=oC(t).filter(r=>r.endsWith(".json"))}catch{retur... L142: `);let r=Re.join(e.repoDir,".gitignore"),o=Ls(re(r));o.changed&&um(r,o.text)}var He=e=>ws($t(Re.join(e.stateD

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

grum.mjsView on unpkg · L137

9".cursor/rules/grum.mdc"]);function Uw(e){return Fw.has(e)}var Zu=["style.new","state.changed","state.missing","token.unknown","value.hardcoded","nati

Low

Ai Review Evidence

The required grum.mjs location classifies design style findings; it does not perform agent configuration writes.

grum.mjsView on unpkg · L9

760case"setup":return iu(t);case"doctor":return l1(t);case"capture":return t.positional[1]!=="reset"||t.positional.length!==2?(q(`Usage: grum capture reset `),2):(oy(Ge(t).repoDir),Y(

Low

Ai Review Evidence

The CLI routes the explicit setup command to setup logic, which writes project Cursor configuration files.

grum.mjsView on unpkg · L760

736,t,n,r,o){let s=c=>re(te.join(e.repoDir,c)),i=n?ug(s(".cursor/hooks.json")):cg(s(".cursor/hooks.json"),r.hook),l=n?Ds(s(".cursor/mcp.json")):Ps(s(".cursor/mcp.json"),r.mcp);for(let c of[i,l])if(!c.ok)return q(`grum: ${c.error} `),1;Yt(e,".c

Low

Ai Review Evidence

The CLI routes the explicit setup command to setup logic, which writes project Cursor configuration files.

grum.mjsView on unpkg · L736

package.jsonView file

1{ "name": "@grum-os/cli", "version": "0.3.33", "contentHash": "[redacted]", "description": "Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.", "homepage": "https://www.grum.so", "keywords": [ "design", "design-system", "drift", "tokens", "cursor", "mcp", "pre-commit", "lint" ], "type": "module", "bin": { "grum": "grum.mjs" }, "files": [ "grum.mjs", "content.md5", "README.md", "brand.png" ], "engines": { "node": "

Low

Suspicious Lifecycle Evidence

package.json identifies grum.mjs as the CLI entrypoint and declares no lifecycle hook.

package.jsonView on unpkg · L1

Findings

4 High2 Medium6 Low

HighChild Processgrum.mjs

HighSame File Env Network Executiongrum.mjs

HighCommand Output Exfiltrationgrum.mjs

HighTrigger Reachable Command Output Exfiltrationgrum.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencegrum.mjs

Affected versions and remediation

This report applies to @grum-os/cli@0.3.33.

See all versions of @grum-os/cli for other recorded verdicts.

Review the evidence and your use of @grum-os/cli@0.3.33 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-15 00:36:54.314Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @grum-os/cli / 0.3.33

@grum-os/cli@0.3.33

Keep a repository on the design contract reviewed in Grum: a local drift check, review requests, Cursor hooks and an MCP server.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the CLI; project agent configuration changes occur through the setup command.

Impact

No harmful effect was established from these behaviors.

Mechanism

The CLI runs fixed Git metadata queries, and submits report data only when signed in and invoked with --ci or --report. Setup writes project Cursor configuration files.

AI rationale

Evidence

.cursor/hooks.json.cursor/mcp.json.cursor/rules/grum.mdc

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json identifies grum.mjs as the CLI entrypoint and declares no lifecycle hook.
The required grum.mjs location classifies design style findings; it does not perform agent configuration writes.
The CLI routes the explicit setup command to setup logic, which writes project Cursor configuration files.
Git execution uses fixed Git commands to read repository status and metadata, without shell evaluation.
Authenticated report submission is gated by the explicit --ci or --report option.

Evidence against

The bundle uses child processes and network requests, but the inspected callers tie them to Git metadata collection and Grum product reporting.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 764 KB of source, external domains: app.grum.so, chromewebstore.google.com, example.com, fonts.gstatic.com, nodejs.org, www.w3.org

Source & flagged code

8 flagged

grum.mjsView file

High

Child Process

Package source references child process execution.

grum.mjsView on unpkg · L139

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

grum.mjsView on unpkg · L137

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

grum.mjsView on unpkg · L137

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

grum.mjsView on unpkg · L137

9".cursor/rules/grum.mdc"]);function Uw(e){return Fw.has(e)}var Zu=["style.new","state.changed","state.missing","token.unknown","value.hardcoded","nati

Low

Ai Review Evidence

The required grum.mjs location classifies design style findings; it does not perform agent configuration writes.

grum.mjsView on unpkg · L9

760case"setup":return iu(t);case"doctor":return l1(t);case"capture":return t.positional[1]!=="reset"||t.positional.length!==2?(q(`Usage: grum capture reset `),2):(oy(Ge(t).repoDir),Y(

Low

Ai Review Evidence

The CLI routes the explicit setup command to setup logic, which writes project Cursor configuration files.

grum.mjsView on unpkg · L760

Low

Ai Review Evidence

The CLI routes the explicit setup command to setup logic, which writes project Cursor configuration files.

grum.mjsView on unpkg · L736

package.jsonView file

Low

Suspicious Lifecycle Evidence

package.json identifies grum.mjs as the CLI entrypoint and declares no lifecycle hook.

package.jsonView on unpkg · L1

Findings

4 High2 Medium6 Low

HighChild Processgrum.mjs

HighSame File Env Network Executiongrum.mjs

HighCommand Output Exfiltrationgrum.mjs

HighTrigger Reachable Command Output Exfiltrationgrum.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencegrum.mjs

Affected versions and remediation

This report applies to @grum-os/cli@0.3.33.

See all versions of @grum-os/cli for other recorded verdicts.

Review the evidence and your use of @grum-os/cli@0.3.33 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-15 00:36:54.314Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.