@ngockhoale/ukit@2.6.3

⚠ Under review

Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The manifest and inspected source excerpts showed no install hook or concrete attack behavior. A clean decision requires citations for ten specified paths, but the citation limit is eight; the available evidence therefore cannot support the required clean coverage.

Static reason

No blocking static signals were detected.

Trigger

Running the CLI or invoking an installed hook or helper.

Impact

No concrete malicious impact was established from the inspected excerpts.

Mechanism

The inspected helpers read hook input, load package-local routing data, and manage workspace configuration.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 68.0% confidence as Unknown with low false-positive risk.

AI review observations

package.json exposes a CLI and has no install lifecycle hook.
The inspected core code protects selected agent directories and preserves existing settings while applying configuration.
The watchdog reads hook input, while the skill router loads a package-local route catalog; these excerpts show no attack behavior.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 76 file(s), 716 KB of source

Source & flagged code

7 flagged

templates/.claude/hooks/task-watchdog.shView file

•path = templates/.claude/hooks/task-watchdog.sh kind = payload_in_excluded_dir sizeBytes = 10263 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.claude/hooks/task-watchdog.shView on unpkg

•path = templates/.claude/hooks/task-watchdog.sh kind = build_helper sizeBytes = 10263 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.claude/hooks/task-watchdog.shView on unpkg

package.jsonView file

Lines 7-47json

7 "keywords": [

8 "ukit",

9 "claude",

10 "codex",

11 "claude-code",

12 "opencode",

13 "omp",

14 "oh-my-pi",

15 "skills",

16 "agents",

17 "ai",

18 "ai-workspace",

19 "cli",

20 "developer-tools"

21 ],

22 "repository": {

23 "type": "git",

24 "url": "git+https://github.com/lengockhoa/UKit.git"

25 },

26 "homepage": "https://github.com/lengockhoa/UKit#readme",

27 "bugs": {

28 "url": "https://github.com/lengockhoa/UKit/issues"

29 },

30 "files": [

31 "bin/",

32 "src/",

33 "scripts/",

34 "templates/",

Low

Suspicious Lifecycle Evidence

package.json exposes a CLI and has no install lifecycle hook.

package.jsonView on unpkg · L27

35 "CHANGELOG.md",

36 "LICENSE",

37 "templates/CLAUDE.md",

38 "templates/AGENTS.md",

39 "templates/.gitignore",

40 "manifests/",

41 "templates/adapter-presets/opencode/opencode.template.json"

42 ],

43 "publishConfig": {

44 "access": "public"

45 },

46 "bin": {

47 "ukit": "bin/ukit"

src/core/applyPlan.jsView file

Lines 1-27javascript

1import fs from 'node:fs/promises';

2import path from 'node:path';

3import { writeFileAtomic, writeFileExclusive, copyFileSafe, createDirectoryLink, removeLinkOnly } from './fileOps.js';

5// legacy: '.antigravity/' stays TCC-protected — Antigravity adapter removed in v2.2.0, but a

6// stale install may still have the dir and must not lose TCC protection.

src/core/ensureGitignore.jsView file

Lines 1-26javascript

1import fs from 'node:fs/promises';

2import path from 'node:path';

3import { writeFileAtomic } from './fileOps.js';

5// Root-anchored (leading `/`) so the block only ignores project-root entries.

6// Unanchored dir entries (`.claude/`) match same-named dirs at ANY depth and

src/core/gatewayResilienceEnv.jsView file

Lines 1-41javascript

1import fs from 'node:fs/promises';

2import fsSync from 'node:fs';

3import os from 'node:os';

4import path from 'node:path';

src/core/repairBrokenHooks.jsView file

Lines 153-193javascript

153

154 return removals;

155}

156

157function backupPathFor(settingsPath) {

158 return `${settingsPath}.ukit-backup`;

159}

Source & flagged code

7 flagged · loading source

templates/.claude/hooks/task-watchdog.shView file

•path = templates/.claude/hooks/task-watchdog.sh kind = payload_in_excluded_dir sizeBytes = 10263 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

templates/.claude/hooks/task-watchdog.shView on unpkg

•path = templates/.claude/hooks/task-watchdog.sh kind = build_helper sizeBytes = 10263 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/.claude/hooks/task-watchdog.shView on unpkg

package.jsonView file

27"bugs": { "url": "https://github.com/lengockhoa/UKit/issues" }, "files": [ "bin/", "src/", "scripts/", "templates/",

Low

Findings

1 High3 Medium8 Low

HighPayload In Excluded Dirtemplates/.claude/hooks/task-watchdog.sh

MediumEnvironment Vars

MediumShips Build Helpertemplates/.claude/hooks/task-watchdog.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencesrc/core/applyPlan.js

LowAi Review Evidencesrc/core/ensureGitignore.js

LowAi Review Evidencesrc/core/gatewayResilienceEnv.js

LowAi Review Evidencesrc/core/repairBrokenHooks.js

Affected versions and remediation

This report applies to @ngockhoale/ukit@2.6.3.

See all versions of @ngockhoale/ukit for other recorded verdicts.

Review the evidence and your use of @ngockhoale/ukit@2.6.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 00:58:01.316Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.