registry / @kaydash9999/banker-plugins / 0.16.0
@kaydash9999/banker-plugins@0.16.0
banker — Claude Code + Codex CLI plugin (QA, audit, docs, architecture, wiki skills). Install via Claude Code marketplace, or `npm i -g @kaydash9999/banker-plugins` then `banker setup`.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package has no install-time execution beyond a prepublish version check. The flagged configuration behavior is in separate user-run skill commands, including one that requires `on --yes`, so the inspected source supports a clean verdict.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the banker setup command or separately invokes a skill command.
Impact
No confirmed attack surface was established.
Mechanism
The package has no npm install hook; the banker CLI setup branch copies plugin content, while the inspected skill scripts expose their own commands and scoped configuration destinations.
AI rationale
The package has no install-time execution beyond a prepublish version check. The flagged configuration behavior is in separate user-run skill commands, including one that requires `on --yes`, so the inspected source supports a clean verdict.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only a prepublishOnly version check, not an install hook.
- The banker CLI runs setup only after a user supplies the setup command; its setup path does not invoke the separately shipped skill scripts.
- codex/manifest.json describes skills distributed per target, not scripts run during npm installation.
- omc-patch takes command-line modes and targets Oh My Claude Code files under the user's Claude plugins directory.
- payload-mon targets a configurable HUD file and runs as a separate command.
- bypass-permissions requires the exact on --yes command to enable the setting.
- claude-update-last exposes explicit on, off, and status commands for a custom HUD file.
- tone-compact exposes explicit on, off, and status commands for Claude and Codex configuration directories.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flaggedbin/banker.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
}`;
fs.writefilesync(skillmd, src.slice(0, fm.index) + `---\n${block}\n---` + src.slice(fm.index + fm[0].length));
}
function setupclaude(dryrun) {
log('• claude code:');
if (!have('claude')) { warn(' claude cli not found on path — install claude code first. skipping --claude.'); return false; }
const steps = [
['claude', ['plugin', 'marketplace', 'add', pkg_root]],
['claude', ['plugin', 'install', `${plugin_name}@${marketplace}`]],
];
for (const [bin, args] of steps) {
if (dryrun) { log(` [dry-run] ${bin} ${args.join(' ')}`); continu
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/banker.jsView on unpkg•matchType = previous_version_dangerous_delta
matchedPackage = @kaydash9999/banker-plugins@0.13.0
matchedIdentity = npm:[redacted]:0.13.0
similarity = 0.421
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/banker.jsView on unpkgFindings
4 High5 Medium6 Low
HighExternal Ai Agent Control Surface Mutationskills/omc-patch/scripts/omc-patch.mjs
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/banker.js
HighSemantic Analysis Limitedskills/3d-intro-build/references/verify-intro.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltabin/banker.js
MediumDynamic Requirebin/banker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/audit-web-page/harness.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptoskills/payload-mon/scripts/payload-size.mjs
Low
Affected versions and remediation
This report applies to @kaydash9999/banker-plugins@0.16.0.
See all versions of @kaydash9999/banker-plugins for other recorded verdicts.
- Review the evidence and your use of @kaydash9999/banker-plugins@0.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.