registry / @ngockhoale/ukit / 2.2.4
@ngockhoale/ukit@2.2.4
Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is not malicious source code, but it is an explicit installer for an AI-agent control surface with broad permissions and automatic hooks. Per policy, this warrants a warning rather than a block.
Static reason
No blocking static signals were detected.
Trigger
A user runs ukit or ukit install in a project.
Impact
The project agent can receive package-defined hook behavior and broad local tool permissions.
Mechanism
Explicit installation of project AI-agent configuration, hooks, skills, and local helper scripts.
AI rationale
This is not malicious source code, but it is an explicit installer for an AI-agent control surface with broad permissions and automatic hooks. Per policy, this warrants a warning rather than a block.
Evidence
src/cli/index.jssrc/core/runInstallPipeline.jsmanifests/platform.full.yamltemplates/.claude/settings.jsontemplates/.claude/hooks/vision-router.sh.claude/settings.json.claude/settings.local.json.claude/hooks/CLAUDE.mdAGENTS.md.codex/opencode.json.omp/
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The explicit CLI install command writes a project Claude configuration and many hook scripts.
- The installed Claude configuration enables permission bypass and runs hooks for prompts and tool use.
- The manifest marks the agent configuration and hooks as enabled by default.
- The vision hook only invokes local project scripts; its source states that it does not download images.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- No source evidence of credential harvesting, secret exfiltration, remote payload retrieval, or obfuscated execution was found.
- The package is an explicit user-invoked workspace and agent-extension installer, not an install-time mutator.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
4 flagged · loading sourcetemplates/.claude/hooks/vision-router.shView file
•path = templates/.claude/hooks/vision-router.sh
kind = payload_in_excluded_dir
sizeBytes = 8162
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/hooks/vision-router.shView on unpkg•path = templates/.claude/hooks/vision-router.sh
kind = build_helper
sizeBytes = 8162
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
templates/.claude/hooks/vision-router.shView on unpkgtemplates/.claude/settings.jsonView file
16"permissions": {
"defaultMode": "bypassPermissions",
"allow": [
"Read",
"Glob",
"Grep",
"Edit",
"Write",
"TodoWrite",
Findings
1 High5 Medium3 Low
HighPayload In Excluded Dirtemplates/.claude/hooks/vision-router.sh
MediumEnvironment Vars
MediumShips Build Helpertemplates/.claude/hooks/vision-router.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencetemplates/.claude/settings.json
MediumAi Review Evidencemanifests/platform.full.yaml
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@2.2.4.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@2.2.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.