registry / @kaydash9999/banker-plugins / 0.18.0
@kaydash9999/banker-plugins@0.18.0
banker — Claude Code + Codex CLI plugin (QA, audit, docs, architecture, wiki skills). Install via Claude Code marketplace, or `npm i -g @kaydash9999/banker-plugins` then `banker setup`.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe inspected findings are package-aligned setup and opt-out aggregate telemetry, while sensitive permission-mode changes require an explicit command. No concrete attack behavior was established.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user sets up the Claude plugin and invokes Banker skills; a SessionStart hook can start a throttled background check-in.
Impact
No harmful effect was established; aggregate package-specific usage data is disclosed to the package endpoint unless telemetry is disabled.
Mechanism
Hooks count Banker skill usage locally, then send aggregated counts with the installed version and operating-system platform to the configured telemetry endpoint.
AI rationale
The inspected findings are package-aligned setup and opt-out aggregate telemetry, while sensitive permission-mode changes require an explicit command. No concrete attack behavior was established.
Evidence
hooks/hooks.jsonhooks/telemetry-count-skill.mjshooks/update-checkin.mjshooks/update-notify.mjsbin/lib/telemetry-config.mjs
Network endpoints1
banker.banker-plugins.workers.dev/
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and has only a prepublishOnly version check, not an install hook.
- The flagged launcher location resolves the user-level Claude plugins directory; setup is handled by the CLI.
- The integration files point to user configuration or plugin locations, and the Codex manifest describes skills distributed by the package.
- The monitor, patch, and probe scripts target specific Claude plugin or HUD paths; the probe uses a scratch home and project.
- The permission-mode tool requires the exact `on --yes` command; the screenshot helper documents loopback-only URLs by default.
- Runtime hooks collect Banker skill counts and send version, platform, and hourly skill-count aggregates to the package telemetry endpoint; opt-out is available.
Evidence against
- Usage counting is enabled by default, so the package can collect aggregate skill-usage patterns unless the user opts out.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
6 flaggedbin/banker.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
filesync(skillmd, src.slice(0, fm.index) + `---\n${block}\n---` + src.slice(fm.index + fm[0].length));
}
function setupclaude(dryrun) {
log('• claude code:');
if (!have('claude')) { warn(' claude cli not found on path — install claude code first. skipping --claude.'); return false; }
const steps = [
['claude', ['plugin', 'marketplace', 'add', pkg_root]],
['claude', ['plugin', 'install', `${plugin_name}@${marketplace}`]],
];
for (const [bin, args] of steps) {
if (dryrun) { log(` [dry-run] ${bin} ${args.join(' ')}`); continue; }
try {
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/banker.jsView on unpkg9*/
L10: const fs = require('fs');
L11: const os = require('os');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/banker.jsView on unpkg · L9skills/payload-mon/scripts/payload-size.mjs
Findings
3 High5 Medium6 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/banker.js
HighSemantic Analysis Limitedskills/anti-drm/scripts/anti-drm.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltaskills/ultra-chain/references/capture.mjs
MediumDynamic Requirebin/banker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/audit-web-page/harness.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptoskills/payload-mon/scripts/payload-size.mjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @kaydash9999/banker-plugins@0.18.0.
See all versions of @kaydash9999/banker-plugins for other recorded verdicts.
- Review the evidence and your use of @kaydash9999/banker-plugins@0.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.