@ngockhoale/ukit@2.2.11
Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe reviewed source supports a warning for first-party agent integration and project configuration capabilities. The evidence does not establish a concrete attack, so this is not a publish block.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user installs or invokes UKit integration tooling, or Claude Code runs an installed hook.
Impact
The integration can affect agent behavior and project configuration; no credential theft or other malicious impact was established.
Mechanism
Hooks route prompt and tool signals; utilities read or maintain Claude project settings and UKit state.
AI rationale
The reviewed source supports a warning for first-party agent integration and project configuration capabilities. The evidence does not establish a concrete attack, so this is not a publish block.
Evidence
src/core/applyPlan.jssrc/core/ensureGitignore.jssrc/index/buildIndex.jstemplates/.claude/hooks/skill-router.shtemplates/.claude/ukit/index/extract-image.mjstemplates/.claude/ukit/index/provision-worktree.mjstemplates/.claude/ukit/index/reset-auto-permissions.mjstemplates/.claude/ukit/index/route-task.mjs
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package contains first-party Claude Code hooks and tools that read agent project settings, route prompts and maintain state files.
- The image hook runs during prompt handling and can mark images for later analysis; this is an agent integration capability, not evidence of exfiltration.
- The permission reset utility accesses Claude settings and UKit-managed permission state.
- No concrete malicious behavior or data exfiltration was established in the inspected integration code.
Evidence against
- The manifest exposes an explicit CLI and has no npm lifecycle hooks.
- The release verification helper runs tests and a local package dry run when explicitly invoked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcetemplates/.claude/hooks/vision-router.shView file
•path = templates/.claude/hooks/vision-router.sh
kind = payload_in_excluded_dir
sizeBytes = 8162
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/hooks/vision-router.shView on unpkg•path = templates/.claude/hooks/vision-router.sh
kind = build_helper
sizeBytes = 8162
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
templates/.claude/hooks/vision-router.shView on unpkgpackage.jsonView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
Findings
3 High6 Medium3 Low
HighPayload In Excluded Dirtemplates/.claude/hooks/vision-router.sh
HighSemantic Analysis Limitedpackage.json
HighPrevious Version Dangerous Deltascripts/release/verify-release.mjs
MediumEnvironment Vars
MediumShips Build Helpertemplates/.claude/hooks/vision-router.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/core/applyPlan.js
MediumAi Review Evidencesrc/core/ensureGitignore.js
MediumAi Review Evidencesrc/index/buildIndex.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@2.2.11.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@2.2.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.