registry / @happyvertical/smrt-cli / 0.39.13

@happyvertical/smrt-cli@0.39.13

Developer CLI for SMRT framework - introspection, testing, and project management

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `smrt docs:agents`, `smrt docs:claude`, or `smrt gnode create` with a template.

Impact

A user-selected template configuration can execute with the invoking user's Node permissions; documentation commands alter only named project-local agent paths.

Mechanism

Explicit project scaffolding, agent-context generation, and user-selected template loading.

Rationale

The package is not malicious by source evidence: it has no lifecycle execution or credential-exfiltration behavior. Downgrade to warn because explicit commands mutate an AI-agent-adjacent project control path and execute user-selected remote template configuration.

Evidence

package.jsonbin/smrt.jsdist/index.jsdist/commands-DOYdmiAx.js.agents/smrt-framework.md.claude/smrt-framework.md

Network endpoints4

github.comcodeload.github.comgitlab.combitbucket.org

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`dist/commands-DOYdmiAx.js` implements `docs:agents` and `docs:claude`, explicitly writing `.agents/smrt-framework.md` or `.claude/smrt-framework.md`.
`dist/commands-DOYdmiAx.js` downloads a user-selected git template over HTTPS and dynamically imports its `template.config.js`/`.ts`, which executes template code during `smrt gnode create`.
`dist/commands-DOYdmiAx.js` runs validated base-generator commands only after the explicit `smrt gnode create` command.

Evidence against

`package.json` has no `preinstall`, `install`, `postinstall`, or other lifecycle hook.
`bin/smrt.js` only launches the packaged CLI after a user invokes the `smrt` binary.
No `eval`, `Function`, VM, native-module loading, credential harvesting, or outbound exfiltration path was found.
Network access is limited to explicit git-template downloads with HTTPS-only trusted-host redirect checks.
Agent-context writes are explicit CLI commands with a dry-run option, not install-time mutation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 387 KB of source, external domains: bitbucket.org, github.com, gitlab.com

Source & flagged code

5 flagged

bin/smrt.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { spawnSync } from 'node:child_process';

4import { existsSync } from 'node:fs';

High

Child Process

Package source references child process execution.

bin/smrt.jsView on unpkg · L2

5import { dirname, resolve } from 'node:path';

6import { fileURLToPath } from 'node:url';

8const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');

9const distEntry = resolve(packageRoot, 'dist/index.js');

10const sourceEntry = resolve(packageRoot, 'src/index.ts');

12const command = existsSync(distEntry)

13 ? [distEntry, ...process.argv.slice(2)]

14 : ['--import', 'tsx', sourceEntry, ...process.argv.slice(2)];

16const result = spawnSync(process.execPath, command, { stdio: 'inherit' });

18if (result.error) {

19 throw result.error;

20}

22if (result.signal) {

dist/commands-DOYdmiAx.jsView file

Lines 102-142javascript

102 slot: {

103 type: "string",

104 description: "Export only a specific slot (e.g., sources, settings)",

105 short: "s"

106 },

107 json: {

108 type: "boolean",

Source & flagged code

5 flagged · loading source

bin/smrt.jsView file

2L3: import { spawnSync } from 'node:child_process'; L4: import { existsSync } from 'node:fs';

High

Child Process

Package source references child process execution.

bin/smrt.jsView on unpkg · L2

dist/commands-DOYdmiAx.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @happyvertical/smrt-cli@0.39.10 matchedIdentity = npm:QGhhcHB5dmVydGljYWwvc21ydC1jbGk:0.39.10 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands-DOYdmiAx.jsView on unpkg

4474* Security: Command and arguments are validated to prevent injection attacks. L4475: * shell: true is NOT used to avoid command injection vulnerabilities. L4476: */

High

Shell

Package source references shell execution.

dist/commands-DOYdmiAx.jsView on unpkg · L4474

3653execSync(`git config ${configScope} merge.smrt-json.name "SMRT JSON merge driver"`, { stdio: "inherit" }); L3654: execSync(`git config ${configScope} merge.smrt-json.driver "npx smrt merge-json %O %A %B"`, { stdio: "inherit" }); L3655: changes.push(`Git merge driver configured (${options.global ? "global" : "local"})`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands-DOYdmiAx.jsView on unpkg · L3653

122} L123: const { getPackageConfig } = await import("@happyvertical/smrt-config"); L124: const { DEFAULT_CLI_CONFIG } = await import("./config-BwrFRL8L.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/commands-DOYdmiAx.jsView on unpkg · L122

Findings

1 Critical3 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/commands-DOYdmiAx.js

HighChild Processbin/smrt.js

HighShelldist/commands-DOYdmiAx.js

HighRuntime Package Installdist/commands-DOYdmiAx.js

MediumDynamic Requiredist/commands-DOYdmiAx.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

86%Warn

Verdict confidence

IntentDangerous Capability

TypeAI-agent capability abuse

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only AI-agent capability risk

Package metadata

npm

AuthorHappyVertical

Maintainerswllgrffn

Version0.39.13

PublishedJul 14, 2026

LicenseMIT

Dependencies14

Integrityverified

Package size96.1 KB

Files12

Keywordssmrtclideveloper-toolsintrospectiontestingai-agents

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/index.d.tsexports mapbin → smrt, smrt-cli

RuntimeNo engine / OS / CPU constraints

Artifact401 KB · 12 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:watch, clean, cli +5

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Lines 3633-3673javascript

3633 },

3634 force: {

3635 type: "boolean",

3636 description: "Overwrite existing configuration",

3637 default: false,

3638 short: "f"

3639 }

3640 },

3641 handler: async (_args, options) => {

3642 console.log("\n🔧 Configuring SMRT JSON merge driver...\n");

3643 if (!isGitRepository()) {

3644 console.error("❌ Not a git repository. Run `git init` first.");

3645 process.exit(1);

3646 }

3647 const gitRoot = getGitRoot();

3648 const patterns = (options.patterns || DEFAULT_DATA_PATTERNS.join(",")).split(",").map((p) => p.trim()).filter(Boolean);

3649 const configScope = options.global ? "--global" : "--local";

3650 const changes = [];

3651 console.log("📝 Configuring git merge driver...");

3652 try {

3653 execSync(`git config ${configScope} merge.smrt-json.name "SMRT JSON merge driver"`, { stdio: "inherit" });

3654 execSync(`git config ${configScope} merge.smrt-json.driver "npx smrt merge-json %O %A %B"`, { stdio: "inherit" });

3655 changes.push(`Git merge driver configured (${options.global ? "global" : "local"})`);

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/commands-DOYdmiAx.jsView on unpkg · L3653

3656 console.log(` ✓ Merge driver "smrt-json" configured`);

3657 } catch (error) {

3658 console.error("❌ Failed to configure git merge driver");

3659 if (error instanceof Error) console.error(` ${error.message}`);

3660 process.exit(1);

3661 }

3662 console.log("\n📄 Updating .gitattributes...");

3663 const gitattributesPath = resolve(gitRoot, ".gitattributes");

3664 let gitattributesContent = "";

3665 if (existsSync(gitattributesPath)) gitattributesContent = readFileSync(gitattributesPath, "utf-8");

3666 const existingPatterns = [];

3667 const lines = gitattributesContent.split("\n");

3668 for (const line of lines) if (line.includes("merge=smrt-json")) {

3669 const pattern = line.split(/\s+/)[0];

3670 if (pattern) existingPatterns.push(pattern);

3671 }

3672 const newPatterns = [];

3673 for (const pattern of patterns) if (!existingPatterns.includes(pattern)) newPatterns.push(pattern);

Lines 4454-4494javascript

4454function validateBaseGenerator(baseGen, outputDir) {

4455 const allowedCommands = [

4456 "npm",

4457 "npx",

4458 "pnpm",

4459 "yarn",

4460 "bun",

4461 "bunx"

4462 ];

4463 if (!allowedCommands.includes(baseGen.command)) throw new Error(`Base generator command "${baseGen.command}" not allowed. Allowed commands: ${allowedCommands.join(", ")}`);

4464 const dangerousChars = /[;&|`$(){}[\]<>'"\\]/;

4465 if (dangerousChars.test(outputDir)) throw new Error(`Output directory contains dangerous characters: ${outputDir}. Only alphanumeric, dash, underscore, dot, and forward slash are allowed.`);

4466 for (const arg of baseGen.args) {

4467 const replacedArg = arg.replace("{DIR}", outputDir);

4468 if (dangerousChars.test(replacedArg)) throw new Error(`Base generator argument contains dangerous characters after placeholder replacement: ${replacedArg}`);

4469 }

4470}

4471/**

4472* Run base project generator (e.g., create-svelte, create-next-app)

4473*

4474* Security: Command and arguments are validated to prevent injection attacks.

4475* shell: true is NOT used to avoid command injection vulnerabilities.

4476*/

High

Shell

Package source references shell execution.

dist/commands-DOYdmiAx.jsView on unpkg · L4474

4477async function runBaseGenerator(baseGen, outputDir) {

4478 validateBaseGenerator(baseGen, outputDir);

4479 const args = baseGen.args.map((arg) => arg.replace("{DIR}", outputDir));

4480 return new Promise((resolve, reject) => {

4481 const proc = spawn(baseGen.command, args, {

4482 stdio: "inherit",

4483 shell: false

4484 });

4485 proc.on("close", (code) => {

4486 if (code === 0) resolve();

4487 else reject(/* @__PURE__ */ new Error(`Base generator exited with code ${code}`));

4488 });

4489 proc.on("error", reject);

4490 });

4491}

4492/**

4493* Overlay template files onto generated project

4494*/