@nanonets/graft@0.4.5
Build a repo's context graph as a folder of linked markdown files that live in the repo and stay in sync with the code through git.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiDirect inspection found an inert postinstall hook and no credential harvesting, stealth payload, or automatic foreign control-surface mutation. The explicit setup command nevertheless installs persistent agent hooks and instructions, so it warrants a warning under the agent-extension policy.
Decision evidence
public snapshot- dist/cli.js exposes explicit `graft init` agent integration.
- dist/hosts/codex-hooks.js writes ~/.codex/hooks.json and an executable hook shim.
- dist/claude/init.js writes project .claude settings, hooks, and a skill.
- Generated skill discourages direct source re-checking (dist/claude/skill-template.js).
- Hooks invoke graph queries and background builds after agent edits (dist/claude/hooks.js).
- scripts/postinstall.mjs only prints a setup nudge; it makes no writes.
- Agent-control changes require the user-invoked `graft init` command.
- Hook/config edits are keyed Graft entries and preserve unrelated settings.
- OpenRouter source submission occurs only with explicit `build --deep` and a configured key.
Source & flagged code
4 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/claude/shim-template.jsView on unpkg · L17Findings
Affected versions and remediation
This report applies to @nanonets/graft@0.4.5.
See all versions of @nanonets/graft for other recorded verdicts.
- Review the evidence and your use of @nanonets/graft@0.4.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.