registry / @kaydash9999/banker-plugins / 0.8.0
@kaydash9999/banker-plugins@0.8.0
banker — Claude Code + Codex CLI plugin (QA, audit, docs, architecture, wiki skills). Install via Claude Code marketplace, or `npm i -g @kaydash9999/banker-plugins` then `banker setup`.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic source inspection found a concrete default-on telemetry and agent-hook surface, but no credential theft, remote payload execution, shell injection, or unconsented npm install-time mutation. Flag as warn for lifecycle/privacy risk, not block.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing/enabling the banker Claude plugin, then starting a Claude session or using banker skills; `banker setup` explicitly installs Claude/Codex integrations.
Impact
Default-on network reporting of package version, OS family, and aggregate skill/hour invocation counts; setup copies package skills/prompts into user or project agent directories.
Mechanism
Plugin lifecycle telemetry and explicit first-party agent-extension setup.
AI rationale
Static source inspection found a concrete default-on telemetry and agent-hook surface, but no credential theft, remote payload execution, shell injection, or unconsented npm install-time mutation. Flag as warn for lifecycle/privacy risk, not block.
Evidence
package.jsonbin/banker.jsbin/lib/telemetry-config.mjshooks/hooks.jsonhooks/update-notify.mjshooks/update-checkin.mjshooks/update-fetch.mjshooks/telemetry-count.mjshooks/telemetry-count-skill.mjs~/.config/banker/config.json~/.config/banker/usage-log~/.config/banker/update-check.json~/.codex/skills/banker-*~/.codex/prompts/banker-*.md
Network endpoints2
banker.banker-plugins.workers.dev/registry.npmjs.org/@kaydash9999/banker-plugins/latest
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- `hooks/hooks.json` registers session and prompt/tool-use hooks.
- `hooks/update-notify.mjs` spawns a detached update/check-in worker.
- `bin/lib/telemetry-config.mjs` enables a default telemetry endpoint unless opted out.
- `hooks/update-checkin.mjs` POSTs version, OS, and aggregated skill/hour counts.
Evidence against
- `package.json` has only `prepublishOnly`; there is no install lifecycle hook.
- `bin/banker.js` performs agent setup only through explicit `banker setup` commands.
- `hooks/update-checkin.mjs` restricts non-loopback traffic to HTTPS and has no payload execution.
- Reviewed JS uses fixed local files and `execFileSync` arguments, not shell/eval or remote code loading.
- No credential harvesting, arbitrary file exfiltration, destructive broad write, or foreign control-surface mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
3 flaggedbin/banker.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @kaydash9999/banker-plugins@0.6.0
matchedIdentity = npm:[redacted]:0.6.0
similarity = 0.750
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/banker.jsView on unpkg9*/
L10: const fs = require('fs');
L11: const os = require('os');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/banker.jsView on unpkg · L9skills/audit-web-page/harness.pyView file
•path = skills/audit-web-page/harness.py
kind = build_helper
sizeBytes = 4152
magicHex = [redacted]
Medium
Findings
1 High5 Medium5 Low
HighPrevious Version Dangerous Deltabin/banker.js
MediumDynamic Requirebin/banker.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperskills/audit-web-page/harness.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @kaydash9999/banker-plugins@0.8.0.
See all versions of @kaydash9999/banker-plugins for other recorded verdicts.
- Review the evidence and your use of @kaydash9999/banker-plugins@0.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.