@lifeaitools/clauth@1.30.23: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@lifeaitools/clauth@1.30.23: AI-agent control-surface risk | LPM Firewall

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

.clauth-skill/references/keys-guide.mdView file

94patternName = github_pat severity = critical line = 94 matchedText = ghp[redacted]

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.clauth-skill/references/keys-guide.mdView on unpkg · L94

94patternName = github_pat severity = critical line = 94 matchedText = ghp[redacted]

Critical

Secret Pattern

GitHub personal access token in .clauth-skill/references/keys-guide.md

.clauth-skill/references/keys-guide.mdView on unpkg · L94

cli/watchdog-registry.jsView file

3import path from "path"; L4: import { spawnSync } from "child_process"; L5:

High

Child Process

Package source references child process execution.

cli/watchdog-registry.jsView on unpkg · L3

cli/fingerprint.jsView file

15// Cache path — avoids re-querying WMI/CIM on every daemon start. L16: // This eliminates the spawnSync cmd.exe ETIMEDOUT crash that occurs L17: // when PowerShell/WMI is slow on first call after boot.

High

Shell

Package source references shell execution.

cli/fingerprint.jsView on unpkg · L15

cli/commands/serve.jsView file

6L7: import http from "http"; L8: import crypto from "crypto"; ... L16: import ora from "ora"; L17: import { execFileSync, execSync as execSyncTop, spawn } from "child_process"; L18: import Conf from "conf"; ... L61: L62: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L63: const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf8")); L64: const VERSION = pkg.version; ... L180: headers: { "Authorization": `Bearer ${currentKey}`, "Content-Type": "application/json" }, L181: body: JSON.stringify({

Low

Weak Crypto

Package source references weak cryptographic algorithms.

cli/commands/serve.jsView on unpkg · L6

cli/commands/watchdog.jsView file

7Trigger-reachable persistence chain: manifest.bin -> cli/index.js -> cli/commands/watchdog.js L7: L8: import { execSync, spawnSync } from "child_process"; L9: import fs from "fs"; ... L20: L21: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L22: const TASK_NAME = "ClautWatchdog"; L23: const APPDATA = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming"); L24: const CLAUTH_DIR = path.join(APPDATA, "clauth"); ... L64: // Wrap in Start-Process -Verb RunAs to trigger UAC dialog L65: const encoded = Buffer.from(psCmd, "utf16le").toString("base64"); L66: const result = spawnSync(PS_EXE, [ ... L89: try {

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

cli/commands/watchdog.jsView on unpkg · L7

7L8: import { execSync, spawnSync } from "child_process"; L9: import fs from "fs"; ... L20: L21: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L22: const TASK_NAME = "ClautWatchdog"; L23: const APPDATA = process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming"); L24: const CLAUTH_DIR = path.join(APPDATA, "clauth"); ... L64: // Wrap in Start-Process -Verb RunAs to trigger UAC dialog L65: const encoded = Buffer.from(psCmd, "utf16le").toString("base64"); L66: const result = spawnSync(PS_EXE, [ ... L89: try {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli/commands/watchdog.jsView on unpkg · L7

cli/index.jsView file

944try { L945: const r = await fetch(`http://127.0.0.1:52437/chitchat/${id}`, { signal: AbortSignal.timeout(3000) }); L946: if (!r.ok) { ... L956: // Find claude binary (same candidates as daemon) L957: const { execSync: es, spawn } = await import("child_process"); L958: let claudeBin = null; L959: for (const c of [ L960: process.env.CLAUDE_BIN, L961: path.join(process.env.APPDATA || '', 'npm', 'claude.cmd'),

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/index.jsView on unpkg · L944

836try { L837: execSync("npm install -g @lifeaitools/clauth@latest", { stdio: "inherit" }); L838: console.log(chalk.green("\n Updated successfully.\n"));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/index.jsView on unpkg · L836

316patternName = generic_password severity = medium line = 316 matchedText = { type: ..." },

Medium

Secret Pattern

Hardcoded password in cli/index.js

cli/index.jsView on unpkg · L316

454patternName = generic_password severity = medium line = 454 matchedText = { type: ..." },

cli/commands/install.jsView file

21import { fileURLToPath } from 'url'; L22: import { execSync } from 'child_process'; L23: import Conf from 'conf'; ... L27: L28: const __dirname = dirname(fileURLToPath(import.meta.url)); L29: const ROOT = join(__dirname, '..', '..'); L30: const MGMT = 'https://api.supabase.com/v1'; L31: const SKILLS_DIR = process.env.CLAUTH_SKILLS_DIR || L32: (process.platform === 'win32' L33: ? join(process.env.USERPROFILE || '', '.claude', 'skills') ... L43: if (!_rl) { L44: _rl = createInterface({ input: process.stdin, output: process.stdout });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/commands/install.jsView on unpkg · L21

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672443 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1391 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/commands/scrub.test.jsView file

17patternName = github_pat severity = critical line = 17 matchedText = const GH...hars

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L17

Source & flagged code

18 flagged

package.jsonView file

Lines 1-37json

1{

2 "name": "@lifeaitools/clauth",

3 "version": "1.30.23",

4 "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",

5 "type": "module",

6 "bin": {

7 "clauth": "./cli/index.js"

8 },

9 "scripts": {

10 "build": "bash scripts/build.sh",

11 "test": "node --test cli/commands/scrub.test.js cli/api.classify.test.js cli/supervisor-registry.test.js cli/supervisor-ui.test.js cli/served-script-syntax.test.mjs test/studio-debug.test.mjs test/dashboard-key-generator.test.mjs && node test-auth-verdict.mjs",

12 "test:studio-debug": "node --test test/studio-debug.test.mjs",

13 "test:agent-pool": "node test/agent-pool.test.mjs",

14 "test:call-agent-10": "node test/call-agent-10-skills.test.mjs",

15 "test:call-agent-guard": "node test/call-agent-guard.test.mjs",

16 "test:tintin-settings": "node test/tintin-settings.test.mjs",

17 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L17

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L17

18 "worker:start": "node cli/index.js serve",

19 "worker:stop": "curl -s http://127.0.0.1:52437/shutdown 2>nul || taskkill /F /IM cloudflared.exe 2>nul & exit 0",

20 "worker:restart": "npm run worker:stop && timeout /t 3 /nobreak >nul && npm run worker:start"

21 },

22 "dependencies": {

23 "@vscode/ripgrep": "^1.15.9",

24 "chalk": "^5.3.0",

25 "commander": "^12.1.0",

26 "conf": "^13.0.0",

27 "fast-glob": "^3.3.2",

28 "inquirer": "^10.1.0",

29 "node-fetch": "^3.3.2",

30 "ora": "^8.1.0",

31 "regen-root": "file:../../regen-root.wt/x-claude-sv",

32 "typescript": "^5.9.3"

33 },

34 "engines": {

35 "node": ">=18.0.0"

36 },

37 "keywords": [

.clauth-skill/references/keys-guide.mdView file

Lines 74-114markdown

74

75### 4. Database Connection String — `supabase-db` in clauth

76```

77postgres://postgres.uvojezuorjgqzmhhgluu:[YOUR-PASSWORD]@aws-0-us-west-1.pooler.supabase.com:6543/postgres

78```

79This is for direct SQL access — tools like Drizzle, Prisma, or raw psql use this. Two versions exist:

80- **Pooled** (port 6543) — for apps with many connections (use this)

81- **Direct**

cli/watchdog-registry.jsView file

Lines 1-23javascript

1import fs from "fs";

2import os from "os";

3import path from "path";

4import { spawnSync } from "child_process";

cli/fingerprint.jsView file

Lines 1-35javascript

1// cli/fingerprint.js

2// Collects stable hardware identifiers and derives HMAC tokens

3// Works on Windows (primary) + Linux/macOS (fallback)

4

5import { execSync } from "child_process";

6import { createHmac, createHash } from "crypto";

7import os from

cli/commands/serve.jsView file

6L7: import http from "http"; L8: import crypto from "crypto"; ... L16: import ora from "ora"; L17: import { execFileSync, execSync as execSyncTop, spawn } from "child_process"; L18: import Conf from "conf"; ... L61: L62: const __dirname = path.dirname(fileURLToPath(import.meta.url)); L63: const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "../../package.json"), "utf8")); L64: const VERSION = pkg.version; ... L180: headers: { "Authorization": `Bearer ${currentKey}`, "Content-Type": "application/json" }, L181: body: JSON.stringify({

Low

Weak Crypto

Package source references weak cryptographic algorithms.

cli/commands/serve.jsView on unpkg · L6

cli/commands/watchdog.jsView file

Lines 1-27javascript

1// cli/commands/watchdog.js

2// Manages the clauth watchdog Task Scheduler job on Windows.

3// clauth watchdog install — register job (UAC elevation)

4// clauth watchdog uninstall — remove job (UAC elevation)

5// clauth watchdog status — check if job is registered and running

6// clauth watchdog start — start the job now without waiting for login

7

8import { execSync, spawnSync } from "child_process";

9import

cli/index.jsView file

Lines 924-964javascript

924 missing_cloudflared: "cloudflared not installed — https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/",

925 };

926 const status = data.status || "unknown";

927 console.log(`\n ${

cli/commands/install.jsView file

21import { fileURLToPath } from 'url'; L22: import { execSync } from 'child_process'; L23: import Conf from 'conf'; ... L27: L28: const __dirname = dirname(fileURLToPath(import.meta.url)); L29: const ROOT = join(__dirname, '..', '..'); L30: const MGMT = 'https://api.supabase.com/v1'; L31: const SKILLS_DIR = process.env.CLAUTH_SKILLS_DIR || L32: (process.platform === 'win32' L33: ? join(process.env.USERPROFILE || '', '.claude', 'skills') ... L43: if (!_rl) { L44: _rl = createInterface({ input: process.stdin, output: process.stdout });

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/commands/install.jsView on unpkg · L21

scripts/bin/bootstrap-win.exeView file

•path = scripts/bin/bootstrap-win.exe kind = native_binary sizeBytes = 37672443 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

scripts/bin/bootstrap-win.exeView on unpkg

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1391 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

cli/commands/scrub.test.jsView file

17patternName = github_pat severity = critical line = 17 matchedText = const GH...hars

Critical

Secret Pattern

GitHub personal access token in cli/commands/scrub.test.js

cli/commands/scrub.test.jsView on unpkg · L17