registry / @ngockhoale/ukit / 2.2.9
@ngockhoale/ukit@2.2.9
Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is not malicious by source evidence, but it performs broad project-local AI-agent extension setup with permissive settings and hooks. Warn so users review the installed workspace configuration before use.
Static reason
No blocking static signals were detected.
Trigger
A user runs ukit or ukit install in a project.
Impact
It may change agent permissions and cause local hooks to run during agent or Git activity.
Mechanism
Writes configured AI workspace files and local Git hook blocks.
AI rationale
The package is not malicious by source evidence, but it performs broad project-local AI-agent extension setup with permissive settings and hooks. Warn so users review the installed workspace configuration before use.
Evidence
package.jsonbin/ukitsrc/cli/index.jssrc/cli/commands/install.jssrc/core/runInstallPipeline.jssrc/index/gitHooks.jsmanifests/platform.full.yamltemplates/.claude/settings.jsontemplates/.claude/hooks/vision-router.sh.claude/settings.json.claude/hooks/.claude/ukit/.codex/settings.json.codex/skills.omp/hooks/pre/ukit-bridge.js.git/hooks/post-commit.git/hooks/post-merge.git/hooks/post-checkout
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Benign with medium false-positive risk.
Evidence for warning
- The explicit CLI install command writes a large set of AI workspace assets into the current project.
- The manifest deploys Claude settings, hooks, agents, and Codex and OMP adapter files.
- The shipped Claude settings set the default mode to bypass permissions and register command hooks.
- An explicit install also adds managed Git hooks that run the local index refresh script.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The command entry point uses the current working directory only when the user runs the CLI.
- No source network client, credential harvesting, or data exfiltration path was found.
- The reviewed vision hook only processes prompt references locally and states that it does not download image URLs.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
3 flagged · loading sourcetemplates/.claude/hooks/vision-router.shView file
•path = templates/.claude/hooks/vision-router.sh
kind = payload_in_excluded_dir
sizeBytes = 8162
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/hooks/vision-router.shView on unpkg•path = templates/.claude/hooks/vision-router.sh
kind = build_helper
sizeBytes = 8162
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
templates/.claude/hooks/vision-router.shView on unpkgsrc/cli/commands/install.jsView file
198export async function runInstall({ packageRoot, projectRoot, packageVersion, argv = [] }) {
const toolsArg = parseToolsArg(argv);
const selectedOptionalTools = resolveOptionalToolKeys(toolsArg);
const withCodegraph = argv.includes('--with-codegraph');
const pruneResult = await pruneDeselectedAdapters({
projectRoot,
optionalToolKeys: selectedOptionalTools,
});
const selectedAdapterItemIds = toSelectedAdapterItemIds(selectedOptionalTools);
const pathConfig = buildPathConfig({ packageRoot, projectRoot });
const result = await runInstallPipeline({
packageVersion,
Findings
1 High4 Medium3 Low
HighPayload In Excluded Dirtemplates/.claude/hooks/vision-router.sh
MediumEnvironment Vars
MediumShips Build Helpertemplates/.claude/hooks/vision-router.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/cli/commands/install.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@2.2.9.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@2.2.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.