registry / @luckydraw/cumulus / 1.0.66

@luckydraw/cumulus@1.0.66

RLM-based CLI chat wrapper for Claude with external history context management

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The inspected lifecycle and agent-integration code is consistent with package setup and runtime features. I found no concrete attack behavior warranting a warning or block.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Package installation runs the postinstall script; other inspected behavior requires invoking the CLI or using the application.

Impact

The inspected behavior reduces installed dependency files or supports the package's CLI features; no malicious effect was established.

Mechanism

The hook locates onnxruntime-node and removes selected provider binaries from its Linux x64 directory. Gateway service setup asks for confirmation before installing an auto-start service.

AI rationale

The inspected lifecycle and agent-integration code is consistent with package setup and runtime features. I found no concrete attack behavior warranting a warning or block.

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs a GPU-provider cleanup at postinstall; the script targets files inside onnxruntime-node.
dist/lib/gateway.js resolves the Claude CLI from conventional local install paths.
dist/lib/restricted-codex.js copies Codex authentication into a scratch environment for its service transport.
dist/lib/skills.js scans Claude's local skills directory and records skill names.
dist/tui/hooks/useClaudeProcess.js starts the Claude CLI with stream input for an invoked turn.
dist/gateway/setup.js asks before installing a login-start service.
dist/lib/version-check.js exposes updating as a separate operation.
dist/gateway/daemon.js routes explicit setup and update commands to their handlers.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

9 flagged

package.jsonView file

Lines 31-71json

31 "scripts/strip-gpu-providers.mjs",

32 "package.json",

33 "CHANGELOG.md"

34 ],

35 "bin": {

36 "cumulus": "./dist/cli/cumulus.js",

37 "cumulus-mcp": "./dist/mcp/index.js",

38 "cumulus-gateway": "./dist/gateway/daemon.js"

39 },

40 "scripts": {

41 "build": "rm -rf dist && tsc && cp -r src/gateway/static dist/gateway/static && cp node_modules/@luckydraw/blex/dist/blex.min.global.js dist/gateway/static/blex.min.js && cp node_modules/@luckydraw/blex/dist/blex-chart.min.global.js dist/gateway/static/blex-chart.min.js && node scripts/build-mermaid-esm.mjs && node scripts/check-bundled-dompurify.mjs",

42 "dev": "tsc --watch",

43 "lint": "eslint src",

44 "lint:fix": "eslint src --fix",

45 "format": "prettier --write \"src/**/*.{ts,tsx,json,md}\"",

46 "format:check": "prettier --check \"src/**/*.{ts,tsx,json,md}\"",

47 "type-check": "tsc --noEmit",

48 "test": "vitest",

49 "version": "bash scripts/generate-changelog.sh || true",

50 "prepublishOnly": "npm run build && npm run type-check",

51 "postinstall": "node scripts/strip-gpu-providers.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

52 "prepare": "husky"

53 },

54 "keywords": [

55 "claude",

56 "cli",

57 "chat",

58 "rlm",

59 "context",

60 "mcp"

61 ],

62 "author": "Lucky Draw LLC",

63 "license": "SEE LICENSE IN LICENSE",

64 "publishConfig": {

65 "access": "public"

66 },

67 "engines": {

68 "node": ">=20.0.0"

69 },

70 "lint-staged": {

71 "*.{ts,tsx}": [

dist/tui/hooks/useClaudeProcess.jsView file

Lines 1-23javascript

1/**

2 * Hook for managing Claude subprocess and streaming.

3 */

4import { spawn } from 'child_process';

5import { useCallback, useRef } from 'react';

High

Child Process

Package source references child process execution.

dist/tui/hooks/useClaudeProcess.jsView on unpkg · L3

dist/lib/gateway.jsView file

Lines 2509-2549javascript

2509 // under --permission-mode bypassPermissions it is a guaranteed no-op — so deny-by-default

2510 // has to be expressed as a denylist. Gated on the field being present so an unconstrained

2511 // thread never pays for the inventory probe (a subprocess spawn) at all.

2512 const effectiveDisallowedTools = mergedConfig.allowedTools

2513 ? compileDisallowedTools(mergedConfig.allowedTools, await

dist/gateway/server.jsView file

Lines 1-31javascript

1/**

2 * Gateway HTTP server — exposes the cumulus message pipeline as a REST API

3 * with SSE streaming. Channel adapters and remote clients connect here.

4 *

5 * Endpoints:

6 * POST /api/thread/:name/message — submit message, SSE stream response

7 * POST /api/thread/:name/sync — sync messages from local mode (store only, no Claude)

8 * GET /api/thread/:name/history — recent messages

9 * GET /api/thread/:name/status — thread info + adaptive state

10 * GET /api/threads — list all threads

dist/gateway/setup.jsView file

Lines 1-27javascript

1/**

2 * cumulus-gateway setup wizard and config management.

3 *

4 * Phase 1: `cumulus-gateway setup --project-root <path>` — instant non-interactive setup

5 * Phase 2: `cumulus-gateway setup` — interactive prompts with auto-detection

6 * Phase 4: `cumulus-gateway config set/get/list` — post-install config changes

7 */

8import { execSync } from 'child_process';

9import

dist/lib/version-check.jsView file

Lines 159-199javascript

159export function saveUpdateState(from, to) {

160 const state = {

161 previousVersion: from,

162 updatedAt: new Date().toISOString

dist/gateway/daemon.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/gateway/daemon.js#virtual:normalized:round1View on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/strip-gpu-providers.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/tui/hooks/useClaudeProcess.jsView file

3*/ L4: import { spawn } from 'child_process'; L5: import { useCallback, useRef } from 'react';

High

Child Process

Package source references child process execution.

dist/tui/hooks/useClaudeProcess.jsView on unpkg · L3

dist/lib/gateway.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @luckydraw/cumulus@1.0.4 matchedIdentity = npm:QGx1Y2t5ZHJhdy9jdW11bHVz:1.0.4 similarity = 0.485 summary = stored previous version shares package body but lacks this dangerous source file

Findings

1 Critical6 High4 Medium9 Low

CriticalPrevious Version Dangerous Deltadist/lib/gateway.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/tui/hooks/useClaudeProcess.js

HighShelldist/lib/gateway.js

HighTrigger Reachable Persistencedist/gateway/setup.js

HighRuntime Package Installdist/lib/version-check.js

HighSemantic Analysis Limiteddist/gateway/daemon.js#virtual:normalized:round1

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/gateway/setup.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

Affected versions and remediation

This report applies to @luckydraw/cumulus@1.0.66.

See all versions of @luckydraw/cumulus for other recorded verdicts.

Review the evidence and your use of @luckydraw/cumulus@1.0.66 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-07 21:58:23.781Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.