@mulmoclaude/core@0.6.0
Shared server-side core for MulmoClaude and MulmoTerminal — the always-shipped-together subsystems consolidated behind subpath exports so the two hosts can't drift. Server-only except the browser-safe ./whisper/client, ./workspace-setup/slug, ./translatio
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete malicious chain was found, but the package deliberately installs remotely sourced agent instructions into a Claude control surface at runtime. Under the stated policy, this warrants a warning rather than a block.
Decision evidence
public snapshot- `dist/collection/registry/server/index.js` fetches collection bundles from configured HTTPS registries.
- Imported `SKILL.md` and allowlisted templates are mirrored into `<workspaceRoot>/.claude/skills/<slug>`.
- `dist/workspace-setup/index.js` can synchronize bundled `mc-*` preset skills into the Claude skill directory.
- `package.json` has no preinstall, install, postinstall, or prepare hook.
- Agent-skill writes occur only through exported runtime setup/import functions.
- `dist/skill-bridge/index.js` restricts slugs and mirrored files to an allowlist.
- Registry configuration requires HTTPS URLs without credentials; no credential harvesting or exfiltration was found.
Source & flagged code
2 flagged · loading source`dist/collection/registry/server/index.js` fetches collection bundles from configured HTTPS registries.
dist/collection/registry/server/index.jsView on unpkg`dist/workspace-setup/index.js` can synchronize bundled `mc-*` preset skills into the Claude skill directory.
dist/workspace-setup/index.jsView on unpkgFindings
Affected versions and remediation
This report applies to @mulmoclaude/core@0.6.0.
See all versions of @mulmoclaude/core for other recorded verdicts.
- Review the evidence and your use of @mulmoclaude/core@0.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.