registry / @kaydash9999/banker-plugins / 0.23.2
@kaydash9999/banker-plugins@0.23.2
banker — Claude Code + Codex CLI plugin (QA, audit, docs, architecture, wiki skills). Install via Claude Code marketplace, or `npm i -g @kaydash9999/banker-plugins` then `banker setup`.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package has no install-time execution beyond a publish-time version check, and its CLI performs setup only when explicitly invoked. Its default-on usage counting is disclosed with opt-out controls; configuration writes are part of the requested installer behavior.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
The CLI runs only when invoked; setup and telemetry hooks require explicit setup or plugin activation.
Impact
No malicious behavior identified. Setup makes expected configuration changes; telemetry can be disabled through documented controls.
Mechanism
Setup copies the package's skills and hooks into agent configuration locations. Runtime check-ins send documented anonymous counts and package metadata.
AI rationale
The package has no install-time execution beyond a publish-time version check, and its CLI performs setup only when explicitly invoked. Its default-on usage counting is disclosed with opt-out controls; configuration writes are part of the requested installer behavior.
Evidence
~/.codex/hooks.json~/.codex/teamwork/~/.codex/rules/teamwork.rules~/.config/banker/
Network endpoints3
registry.npmjs.org/@kaydash9999/banker-plugins/latestraw.githubusercontent.com/smallOpenSource/banker_plugins/main/skill-changes.jsonbanker.banker-plugins.workers.dev/
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs a version check; the package exposes an explicit banker CLI.
- The CLI runs its main function only when invoked directly, and setup actions require a setup command.
- Telemetry is documented as default-on, with collected fields and opt-out controls disclosed in PRIVACY.md.
- The GitHub star action follows an interactive prompt and runs only after an affirmative or blank response.
Evidence against
- Telemetry is enabled by default and sends daily check-ins to banker.banker-plugins.workers.dev.
- The CLI can install skills and hooks into Codex configuration paths when setup is explicitly run.
- The first-run GitHub star prompt treats a blank response as affirmative.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
17 flaggedbin/banker.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
['claude', ['plugin', 'install', `${plugin_name}@${marketplace}`]],
];
for (const [bin, args] of steps) {
if (dryrun) { log(` [dry-run] ${bin} ${args.join(' ')}`); continue; }
try { cp.execfilesync(bin, args, { stdio: 'inherit', ...barespawnopts() }); }
catch (e) { warn(` step failed (may already be applied): ${bin} ${args.join(' ')}`); }
}
log(' → skills/commands available as /banker:* (reload-plugins or restart to apply).');
log(' → for all-in-one / ultra-chain / ultra-init / front-qa, install omc too: run /banker:setup and pick oh-my-claudecode (or `omc update`).');
return true;
}
function setupcodex(dryrun
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/banker.jsView on unpkg9*/
L10: const fs = require('fs');
L11: const os = require('os');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/banker.jsView on unpkg · L9skills/progress-mon/scripts/pm-sources.mjs
Findings
13 High6 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/banker.js
HighSemantic Analysis Limitedbin/lib/codex-hooks.mjs#virtual:normalized:round1
HighKnown Malware Source Similarityskills/ultra-chain/references/capture.mjs
HighKnown Malware Source Similarityskills/omc-patch/scripts/omc-patch.mjs
HighKnown Malware Source Similaritybin/lib/telemetry-config.mjs
HighKnown Malware Source Similarityskills/ralph-qa/references/seat-spawn.mjs
HighKnown Malware Source Similarityskills/setup-omc-hud/assets/apply-hud.mjs
HighKnown Malware Source Similarityhooks/update-checkin.mjs
HighKnown Malware Source Similarityskills/3d-intro-build/references/preview-lib.mjs
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to @kaydash9999/banker-plugins@0.23.2.
See all versions of @kaydash9999/banker-plugins for other recorded verdicts.
- Review the evidence and your use of @kaydash9999/banker-plugins@0.23.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.