registry / @ngockhoale/ukit / 2.2.1
@ngockhoale/ukit@2.2.1
Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is an explicit-user-command, first-party AI workspace installer with project configuration and hook writes. The capability warrants a warning under policy, but source inspection does not establish malicious behavior.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs the ukit CLI install command.
Impact
Installed hooks can read supplied/session image data and influence Claude/Codex workspace behavior; no exfiltration or remote execution was confirmed.
Mechanism
Project-local AI-agent extension and hook installation.
AI rationale
This is an explicit-user-command, first-party AI workspace installer with project configuration and hook writes. The capability warrants a warning under policy, but source inspection does not establish malicious behavior.
Evidence
package.jsonsrc/cli/index.jssrc/cli/adapters.jsmanifests/platform.full.yamltemplates/.claude/hooks/vision-router.shtemplates/.claude/ukit/index/extract-image.mjs.claude/hooks/vision-router.sh.claude/ukit/index/extract-image.mjs.codex/settings.json.codex/settings.local.json.ukit/storage/cache/vision
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit CLI install deploys AI-tool assets into the current project.
- Manifest installs Claude hooks and Codex settings.
- Installed vision hook processes prompt image references via a local helper.
- Image helper reads session content and writes only project-local cache markers/images.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- No source-backed exfiltration, remote payload loading, or destructive behavior found.
- Vision helper states it has no dependencies or network calls.
- Benchmark shell spawning is an explicitly invoked maintainer script.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcetemplates/.claude/hooks/vision-router.shView file
•path = templates/.claude/hooks/vision-router.sh
kind = payload_in_excluded_dir
sizeBytes = 8162
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/hooks/vision-router.shView on unpkg•path = templates/.claude/hooks/vision-router.sh
kind = build_helper
sizeBytes = 8162
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
templates/.claude/hooks/vision-router.shView on unpkg91const extractorPath = path.join(projectRoot, '.claude', 'ukit', 'index', 'extract-image.mjs');
if (fs.existsSync(extractorPath)) {
const args = [extractorPath, '--detect', '--mark-pending', '--json'];
if (typeof payload?.transcript_path === 'string' && payload.transcript_path.trim()) {
args.push('--session', payload.transcript_path.trim());
}
if (typeof payload?.session_id === 'string' && payload.session_id.trim()) {
args.push('--session-id', payload.session_id.trim());
}
for (const ref of [...localMatches, ...urlMatches]) {
args.push('--ref', ref
Findings
2 High7 Medium3 Low
HighPayload In Excluded Dirtemplates/.claude/hooks/vision-router.sh
HighPrevious Version Dangerous Deltascripts/bench/parallel-agents.mjs
MediumEnvironment Vars
MediumShips Build Helpertemplates/.claude/hooks/vision-router.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/cli/adapters.js
MediumAi Review Evidencemanifests/platform.full.yaml
MediumAi Review Evidencetemplates/.claude/hooks/vision-router.sh
MediumAi Review Evidencetemplates/.claude/ukit/index/extract-image.mjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@2.2.1.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@2.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.