@indigoai-us/hq-cli@5.345.137
HQ by Indigo management CLI — modules and cloud sync
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe postinstall hook can configure a persistent background daemon without a separate user command, so this warrants a warning. The inspected OAuth token request targets Anthropic’s usage endpoint and does not establish credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package through npm runs its postinstall hook.
Impact
The package can add persistent background-service configuration without a separate daemon-install command.
Mechanism
The hook launches the CLI with the daemon install and if-stale options; missing daemon state is treated as stale, leading to service installation.
AI rationale
The postinstall hook can configure a persistent background daemon without a separate user command, so this warrants a warning. The inspected OAuth token request targets Anthropic’s usage endpoint and does not establish credential exfiltration.
Evidence
package.jsonscripts/mesh-daemon-if-stale.mjsdist/lib/mesh/live/daemon/install.js~/Library/LaunchAgents/ai.getindigo.hq-mesh-daemon.plist~/.config/systemd/user/hq-mesh-daemon.service
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The npm postinstall runs a helper that invokes the CLI’s daemon install command automatically.
- A missing daemon version record counts as stale, and the stale path calls the service installer.
- The installer writes per-user service configuration and creates a Windows scheduled task.
- The inspected OAuth collector sends its bearer token to Anthropic’s OAuth usage endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
17 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/mesh-daemon-if-stale.mjs || true
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/mesh-daemon-if-stale.mjs || true
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/startup-registration.jsView file
18*/
L19: import { spawnSync } from "node:child_process";
L20: import { stringDerivedPackageRoot } from "./utils/hq-roots.js";
High
Child Process
Package source references child process execution.
dist/startup-registration.jsView on unpkg · L18Findings
1 Critical9 High9 Medium6 Low
CriticalCredential Exfiltrationdist/lib/capacity/collectors/claude-oauth.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/startup-registration.js
HighShelldist/utils/staged-install.js
HighSame File Env Network Executiondist/commands/rescue.js#virtual:normalized:round1
HighCommand Output Exfiltrationdist/commands/rescue.js#virtual:normalized:round1
HighCloud Metadata Accessdist/lib/lanes/machine-identity.js
HighTrigger Reachable Persistencedist/lib/mesh/live/daemon/install.js
HighPayload In Excluded Dirassets/scaffold/.claude/hooks/validate-policy-frontmatter.sh
HighSemantic Analysis Limitedassets/scaffold/core/scripts/lib/codex-output-schema.mjs#virtual:normalized:round1
Affected versions and remediation
This report applies to @indigoai-us/hq-cli@5.345.137.
See all versions of @indigoai-us/hq-cli for other recorded verdicts.
- Review the evidence and your use of @indigoai-us/hq-cli@5.345.137 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.