@ngockhoale/ukit@2.2.2

⚠ Under review

Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).

AI Security Review

scanned 15d ago · by lpm-firewall-ai

Inspected source showed local agent configuration and routing behavior without a concrete attack chain. A clean verdict requires 11 distinct citations but only 8 are permitted, so the result is manual review under the supplied citation rule.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

No malicious trigger was established from the inspected source.

Impact

No confirmed attack impact was established.

Mechanism

The inspected paths use project-local configuration and state; no malicious network or execution chain was established.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 57.0% confidence as Unknown with medium false-positive risk.

AI review observations

The examined agent integration code imports a project-local route catalog and returns an empty catalog if it is absent.
Image-session discovery reads local Claude project files; the inspected path does not show a network send.
The examined provisioning and permission-reset paths address project-local Claude settings, while index routing uses project-local state files.

Evidence against

The manifest and two remaining required clean citation paths could not fit within the eight-citation limit, so clean citation coverage cannot be completed.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 69 file(s), 523 KB of source

Source & flagged code

7 flagged

templates/.claude/hooks/vision-router.shView file

•path = templates/.claude/hooks/vision-router.sh kind = payload_in_excluded_dir sizeBytes = 8162 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.claude/hooks/vision-router.shView on unpkg

•path = templates/.claude/hooks/vision-router.sh kind = build_helper sizeBytes = 8162 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.claude/hooks/vision-router.shView on unpkg

scripts/release/verify-release.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @ngockhoale/ukit@2.4.1 matchedIdentity = npm:QG5nb2NraG9hbGUvdWtpdA:2.4.1 similarity = 0.611 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/release/verify-release.mjsView on unpkg

src/core/applyPlan.jsView file

Lines 1-27javascript

1import fs from 'node:fs/promises';

2import path from 'node:path';

3import { writeFileAtomic, copyFileSafe, createDirectoryLink, removeLinkOnly } from './fileOps.js';

5// legacy: '.antigravity/' stays TCC-protected — Antigravity adapter removed in v2.2.0, but a

6// stale install may still have the dir and must not lose TCC protection.

src/core/ensureGitignore.jsView file

Lines 1-29javascript

1import fs from 'node:fs/promises';

2import path from 'node:path';

3import { writeFileAtomic } from './fileOps.js';

5const UKIT_ENTRIES =

src/index/buildIndex.jsView file

Lines 939-979javascript

939

940 if (!previousSnapshot.exists) {

941 return true;

942 }

943

944 return previousSnapshot.mtimeMs === nextSnapshot.mtimeMs

945 && previousSnapshot.size

templates/.claude/hooks/skill-router.shView file

Lines 114-154text

114 }

115

116 function loadRuntimeConfig(projectRoot) {

117 const runtimePaths = buildRuntimePaths(projectRoot);

118 const raw = readJson(runtimePaths.configPath, {});

119 return deepMerge(defaultRuntimeConfig(), raw && typeof raw === 'object' ? raw : {});

120 }

121

122 function readIndexGeneratedAtMs(projectRoot) {

123 const artifact = readJson(path.join(projectRoot, '.cache', 'index', 'files.json'), null);

124 const generatedAtRaw = String(artifact?.generatedAt || '').trim();

125

Source & flagged code

7 flagged · loading source

templates/.claude/hooks/vision-router.shView file

•path = templates/.claude/hooks/vision-router.sh kind = payload_in_excluded_dir sizeBytes = 8162 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.claude/hooks/vision-router.shView on unpkg

•path = templates/.claude/hooks/vision-router.sh kind = build_helper sizeBytes = 8162 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.claude/hooks/vision-router.shView on unpkg

scripts/release/verify-release.mjsView file

Findings

2 High3 Medium7 Low

HighPayload In Excluded Dirtemplates/.claude/hooks/vision-router.sh

HighPrevious Version Dangerous Deltascripts/release/verify-release.mjs

MediumEnvironment Vars

MediumShips Build Helpertemplates/.claude/hooks/vision-router.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowAi Review Evidencesrc/core/applyPlan.js

LowAi Review Evidencesrc/core/ensureGitignore.js

LowAi Review Evidencesrc/index/buildIndex.js

LowAi Review Evidencetemplates/.claude/hooks/skill-router.sh

Affected versions and remediation

This report applies to @ngockhoale/ukit@2.2.2.

See all versions of @ngockhoale/ukit for other recorded verdicts.

Review the evidence and your use of @ngockhoale/ukit@2.2.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 00:59:12.608Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.