@ngockhoale/ukit@2.4.1
Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).
AI Security Review
scanned 1mo ago · by lpm-firewall-aiNo source evidence establishes malicious behavior. The explicit installer mutates AI-agent control surfaces, so it warrants a warning under the agent-extension policy.
Static reason
No blocking static signals were detected.
Trigger
The user runs ukit or ukit install in a project.
Impact
Installed hooks can influence Claude Code tool and Stop events in that project.
Mechanism
Explicit CLI installation of AI-agent settings and hooks.
AI rationale
No source evidence establishes malicious behavior. The explicit installer mutates AI-agent control surfaces, so it warrants a warning under the agent-extension policy.
Evidence
manifests/platform.full.yamltemplates/.claude/hooks/task-watchdog.shtemplates/.claude/hooks/sensitive-data-guard.sh.claude/settings.json.claude/hooks/task-watchdog.sh.claude/hooks/sensitive-data-guard.sh.claude/ukit/runtime/task-watchdog.mjs.ukit/storage/config.json
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI installer writes and overwrites Claude Code settings and many hooks in the consumer project.
- The task-watchdog hook imports executable runtime code from the project and can emit a blocking Stop decision.
- The sensitive-data hook reads hook input and project configuration, but its shown purpose is to block secret exposure rather than transmit it.
Evidence against
- package.json contains no preinstall, install, or postinstall lifecycle hook.
- The reviewed hooks contain no network endpoint or outbound request.
- The sensitive-data hook hashes matches and states it does not echo detected values.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcetemplates/.claude/hooks/task-watchdog.shView file
•path = templates/.claude/hooks/task-watchdog.sh
kind = payload_in_excluded_dir
sizeBytes = 8598
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
templates/.claude/hooks/task-watchdog.shView on unpkg•path = templates/.claude/hooks/task-watchdog.sh
kind = build_helper
sizeBytes = 8598
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
templates/.claude/hooks/task-watchdog.shView on unpkg73const runtimePath = path.join(projectRoot, '.claude', 'ukit', 'runtime', 'task-watchdog.mjs');
// Async existence check — sync fs here would violate the all-async invariant
// (a stalled mount would block the loop and the 3s self-kill could not fire).
try {
await fsp.access(runtimePath);
} catch {
process.exit(0);
}
let runtime;
try {
runtime = await import(pathToFileURL(runtimePath).href);
} catch {
process.exit(0);
}
Medium
Findings
2 High7 Medium3 Low
HighPayload In Excluded Dirtemplates/.claude/hooks/task-watchdog.sh
HighSemantic Analysis Limitedpackage.json
MediumEnvironment Vars
MediumShips Build Helpertemplates/.claude/hooks/task-watchdog.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencemanifests/platform.full.yaml
MediumAi Review Evidencemanifests/platform.full.yaml
MediumAi Review Evidencetemplates/.claude/hooks/task-watchdog.sh
MediumAi Review Evidencetemplates/.claude/hooks/sensitive-data-guard.sh
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@2.4.1.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@2.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.