registry / @happyvertical/smrt-cli / 0.38.3

@happyvertical/smrt-cli@0.38.3

Developer CLI for SMRT framework - introspection, testing, and project management

AI Security Review

scanned 4d ago · by lpm-firewall-ai

No confirmed malicious install-time or import-time behavior was found. The package exposes a developer CLI that can write project config/docs, run git/package-manager commands, import local project modules, and download templates only through explicit CLI commands.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User invokes smrt CLI commands such as docs:agents, docs:claude, git:init, gnode, playground:init, or runtime diagnostics.

Impact

Project files may be generated or updated as documented CLI output; no credential harvesting, persistence, exfiltration, or unconsented agent control-surface mutation was identified.

Mechanism

user-invoked developer tooling with scoped filesystem writes and command execution

Rationale

Static source inspection shows suspicious primitives are package-aligned developer CLI capabilities and are activated by explicit commands, not npm lifecycle or passive import. The Claude/agent documentation writer is documented, user-invoked, and scoped to requested output files, so it does not meet the unconsented lifecycle agent-control hijack boundary.

Evidence

package.jsonbin/smrt.jsdist/index.jsdist/commands-BS3AEVpd.jsscripts/verify-package-types-exports.jsAGENTS.mdCLAUDE.md.agents/smrt-framework.md.claude/smrt-framework.md.smrt/register.js.gitattributessrc/playground.tssrc/routes/playground/+page.sveltevite.config.tsvite.config.js

Network endpoints5

github.com/gitlab.com/bitbucket.org/registry.npmjs.orggithub.com/happyvertical/smrt.git

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no npm lifecycle hooks; bin only spawns node on dist/index.js or source fallback.
bin/smrt.js child_process use is a CLI wrapper forwarding user arguments to this package entrypoint.
dist/index.js lazy-loads command bundle and imports consumer project entry/.smrt/register.js only during CLI class discovery.
dist/commands-BS3AEVpd.js docs:agents/docs:claude writes .agents or .claude output only when explicitly invoked, with dry-run support.
dist/commands-BS3AEVpd.js template network access is user-invoked git template download limited to GitHub/GitLab/Bitbucket HTTPS with redirect validation.
Runtime package-manager/git/vitest spawns are tied to explicit scaffold, git:init, playground, or diagnostic commands, not install/import time.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 383 KB of source, external domains: bitbucket.org, github.com, gitlab.com

Source & flagged code

5 flagged

bin/smrt.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { spawnSync } from 'node:child_process';

4import { existsSync } from 'node:fs';

High

Child Process

Package source references child process execution.

bin/smrt.jsView on unpkg · L2

5import { dirname, resolve } from 'node:path';

6import { fileURLToPath } from 'node:url';

8const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');

9const distEntry = resolve(packageRoot, 'dist/index.js');

10const sourceEntry = resolve(packageRoot, 'src/index.ts');

12const command = existsSync(distEntry)

13 ? [distEntry, ...process.argv.slice(2)]

14 : ['--import', 'tsx', sourceEntry, ...process.argv.slice(2)];

16const result = spawnSync(process.execPath, command, { stdio: 'inherit' });

18if (result.error) {

19 throw result.error;

20}

22if (result.signal) {

dist/commands-BS3AEVpd.jsView file

Lines 101-141javascript

101 slot: {

102 type: "string",

103 description: "Export only a specific slot (e.g., sources, settings)",

104 short: "s"

105 },

106 json: {

107 type: "boolean",

Source & flagged code

5 flagged · loading source

bin/smrt.jsView file

2L3: import { spawnSync } from 'node:child_process'; L4: import { existsSync } from 'node:fs';

High

Child Process

Package source references child process execution.

bin/smrt.jsView on unpkg · L2

dist/commands-BS3AEVpd.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @happyvertical/smrt-cli@0.37.11 matchedIdentity = npm:QGhhcHB5dmVydGljYWwvc21ydC1jbGk:0.37.11 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-BS3AEVpd.jsView on unpkg

4469* Security: Command and arguments are validated to prevent injection attacks. L4470: * shell: true is NOT used to avoid command injection vulnerabilities. L4471: */

High

Shell

Package source references shell execution.

dist/commands-BS3AEVpd.jsView on unpkg · L4469

3648execSync(`git config ${configScope} merge.smrt-json.name "SMRT JSON merge driver"`, { stdio: "inherit" }); L3649: execSync(`git config ${configScope} merge.smrt-json.driver "npx smrt merge-json %O %A %B"`, { stdio: "inherit" }); L3650: changes.push(`Git merge driver configured (${options.global ? "global" : "local"})`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands-BS3AEVpd.jsView on unpkg · L3648

121} L122: const { getPackageConfig } = await import("@happyvertical/smrt-config"); L123: const { DEFAULT_CLI_CONFIG } = await import("./config-BwrFRL8L.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/commands-BS3AEVpd.jsView on unpkg · L121

Findings

1 Critical3 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/commands-BS3AEVpd.js

HighChild Processbin/smrt.js

HighShelldist/commands-BS3AEVpd.js

HighRuntime Package Installdist/commands-BS3AEVpd.js

MediumDynamic Requiredist/commands-BS3AEVpd.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 3628-3668javascript

3628 },

3629 force: {

3630 type: "boolean",

3631 description: "Overwrite existing configuration",

3632 default: false,

3633 short: "f"

3634 }

3635 },

3636 handler: async (_args, options) => {

3637 console.log("\n🔧 Configuring SMRT JSON merge driver...\n");

3638 if (!isGitRepository()) {

3639 console.error("❌ Not a git repository. Run `git init` first.");

3640 process.exit(1);

3641 }

3642 const gitRoot = getGitRoot();

3643 const patterns = (options.patterns || DEFAULT_DATA_PATTERNS.join(",")).split(",").map((p) => p.trim()).filter(Boolean);

3644 const configScope = options.global ? "--global" : "--local";

3645 const changes = [];

3646 console.log("📝 Configuring git merge driver...");

3647 try {

3648 execSync(`git config ${configScope} merge.smrt-json.name "SMRT JSON merge driver"`, { stdio: "inherit" });

3649 execSync(`git config ${configScope} merge.smrt-json.driver "npx smrt merge-json %O %A %B"`, { stdio: "inherit" });

3650 changes.push(`Git merge driver configured (${options.global ? "global" : "local"})`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands-BS3AEVpd.jsView on unpkg · L3648

3651 console.log(` ✓ Merge driver "smrt-json" configured`);

3652 } catch (error) {

3653 console.error("❌ Failed to configure git merge driver");

3654 if (error instanceof Error) console.error(` ${error.message}`);

3655 process.exit(1);

3656 }

3657 console.log("\n📄 Updating .gitattributes...");

3658 const gitattributesPath = resolve(gitRoot, ".gitattributes");

3659 let gitattributesContent = "";

3660 if (existsSync(gitattributesPath)) gitattributesContent = readFileSync(gitattributesPath, "utf-8");

3661 const existingPatterns = [];

3662 const lines = gitattributesContent.split("\n");

3663 for (const line of lines) if (line.includes("merge=smrt-json")) {

3664 const pattern = line.split(/\s+/)[0];

3665 if (pattern) existingPatterns.push(pattern);

3666 }

3667 const newPatterns = [];

3668 for (const pattern of patterns) if (!existingPatterns.includes(pattern)) newPatterns.push(pattern);

Lines 4449-4489javascript

4449function validateBaseGenerator(baseGen, outputDir) {

4450 const allowedCommands = [

4451 "npm",

4452 "npx",

4453 "pnpm",

4454 "yarn",

4455 "bun",

4456 "bunx"

4457 ];

4458 if (!allowedCommands.includes(baseGen.command)) throw new Error(`Base generator command "${baseGen.command}" not allowed. Allowed commands: ${allowedCommands.join(", ")}`);

4459 const dangerousChars = /[;&|`$(){}[\]<>'"\\]/;

4460 if (dangerousChars.test(outputDir)) throw new Error(`Output directory contains dangerous characters: ${outputDir}. Only alphanumeric, dash, underscore, dot, and forward slash are allowed.`);

4461 for (const arg of baseGen.args) {

4462 const replacedArg = arg.replace("{DIR}", outputDir);

4463 if (dangerousChars.test(replacedArg)) throw new Error(`Base generator argument contains dangerous characters after placeholder replacement: ${replacedArg}`);

4464 }

4465}

4466/**

4467* Run base project generator (e.g., create-svelte, create-next-app)

4468*

4469* Security: Command and arguments are validated to prevent injection attacks.

4470* shell: true is NOT used to avoid command injection vulnerabilities.

4471*/

High

Shell

Package source references shell execution.

dist/commands-BS3AEVpd.jsView on unpkg · L4469

4472async function runBaseGenerator(baseGen, outputDir) {

4473 validateBaseGenerator(baseGen, outputDir);

4474 const args = baseGen.args.map((arg) => arg.replace("{DIR}", outputDir));

4475 return new Promise((resolve, reject) => {

4476 const proc = spawn(baseGen.command, args, {

4477 stdio: "inherit",

4478 shell: false

4479 });

4480 proc.on("close", (code) => {

4481 if (code === 0) resolve();

4482 else reject(/* @__PURE__ */ new Error(`Base generator exited with code ${code}`));

4483 });

4484 proc.on("error", reject);

4485 });

4486}

4487/**

4488* Overlay template files onto generated project

4489*/