@ngockhoale/ukit@2.6.8
Install/update an index-first AI workspace for Claude Code, OpenAI Codex, OpenCode, and omp (Oh My Pi).
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe installer has a concrete agent configuration mutation capability, so a warning is appropriate under the explicit-command policy. The inspected code does not establish unconsented lifecycle mutation or a concrete attack chain.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the UKit install command.
Impact
Matching hook registrations may be removed from Claude settings; no confirmed credential theft, remote execution, or stealth persistence was identified.
Mechanism
The installer scans home and project Claude settings, strips matching broken hooks, and backs up settings before writing changes.
AI rationale
The installer has a concrete agent configuration mutation capability, so a warning is appropriate under the explicit-command policy. The inspected code does not establish unconsented lifecycle mutation or a concrete attack chain.
Evidence
src/core/repairBrokenHooks.jssrc/core/runInstallPipeline.js
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The install pipeline runs a generic repair of Claude hook registrations in home and project settings files.
- The repair can remove matching hooks from those settings files and writes a backup before changing them.
- Package metadata exposes a CLI but declares no automatic install lifecycle hook.
Evidence against
- The inspected hook repair runs through the explicit install pipeline; no npm install hook was declared.
- The watchdog template describes a hook that handles hook events and delegates Stop decisions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcescripts/bench/runGold.mjsView file
110const rootDir = projectRoot ?? REPO_ROOT;
L111: const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js'));
L112: const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/bench/runGold.mjsView on unpkg · L110src/core/memory/migrate.jsView file
1// Memory v1 → v2 migration — SPEC §4.
L2: // Idempotent: marker v2/migrated-from-v1.json; re-run is a no-op.
Low
Weak Crypto
Package source references weak cryptographic algorithms.
src/core/memory/migrate.jsView on unpkg · L1templates/.claude/hooks/task-watchdog.shView file
Findings
2 High6 Medium4 Low
HighPayload In Excluded Dirtemplates/.claude/hooks/task-watchdog.sh
HighPrevious Version Dangerous Deltascripts/bench/parallel-agents.mjs
MediumDynamic Requirescripts/bench/runGold.mjs
MediumEnvironment Vars
MediumShips Build Helpertemplates/.claude/hooks/task-watchdog.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/core/repairBrokenHooks.js
MediumAi Review Evidencesrc/core/runInstallPipeline.js
LowScripts Present
LowWeak Cryptosrc/core/memory/migrate.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@2.6.8.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@2.6.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.