@ngockhoale/ukit@3.1.0

⚠ Under review

Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The inspected source shows a CLI-driven workspace installer and project hook configuration, with no concrete malicious behavior established. A clean verdict requires citations for eleven requested paths, exceeding the eight-citation limit; no independent source behavior supports a warning or block.

Static reason

No blocking static signals were detected.

Trigger

A user runs the package CLI installer and Claude later invokes a configured project hook.

Impact

No confirmed harmful effect or attack surface was established.

Mechanism

The hook consumes Claude event input and uses project-local runtime files; no malicious action was established from the inspected excerpts.

AI rationale

Decision evidence

public snapshot

AI called this Manual Review at 68.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest exposes a CLI and contains no preinstall, install, or postinstall lifecycle hook.
The Claude hook reads its event name and project root from its invocation context.
The template registers package-owned commands for Claude edit and write events.
The CLI routes the explicit install command to the package installer.

Evidence against

The inspected hook is part of an explicit CLI setup flow; no source inspected here establishes an unconsented install-time mutation or a concrete attack.
The surfaced hook behavior is consistent with a workspace tool that runs Claude project hooks.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 237 file(s), 2.38 MB of source

Source & flagged code

7 flagged

scripts/bench/runGold.mjsView file

Lines 101-141javascript

101 failures.push(`budget: used ${packet.budget.used} > maxTokens ${maxTokens}`);

102 }

103

104 return {

105 id: testCase.id ?? '(unnamed)',

106 mode: packet.task_type,

107 expectedMode,

108 anchors: [...anchorPaths],

109 expectedAnchors,

110 anchorHits,

111 anchorMisses,

112 budgetUsed: packet.budget?.used ?? 0,

113 maxTokens,

114 routedMode: routed.mode,

115 pass: failures.length === 0,

116 failures,

117 };

118}

119

120export async function runGold({ projectRoot, corpusPath } = {}) {

121 const rootDir = projectRoot ?? REPO_ROOT;

122 const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js'));

123 const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/bench/runGold.mjsView on unpkg · L121

124 const { buildCodeIndex } = await import(path.join(REPO_ROOT, 'src/index/buildIndex.js'));

125 const { INDEX_ARTIFACTS, getArtifactPath } = await import(path.join(REPO_ROOT, 'src/index/paths.js'));

126

127 // The bench needs an index to score anchors; build once when missing.

128 try {

129 await fs.stat(getArtifactPath(rootDir, INDEX_ARTIFACTS.files));

130 } catch {

131 console.log('[bench] index missing — building code index first');

132 await buildCodeIndex({ rootDir });

133 }

134

135 const cases = await loadCorpus(corpusPath ?? DEFAULT_CORPUS);

136 const results = [];

137 for (const testCase of cases) {

138 results.push(await runGoldCase(rootDir, testCase, { compileContext, routeTask }));

139 }

140 return { results, pass: results.every((r) => r.pass) };

141}

src/core/memory/learningCandidates.jsView file

Lines 1-21javascript

1// learningCandidates.js — M04.2 learning candidates (SPEC §5 FR-016, FR-018; C11).

2//

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/memory/learningCandidates.jsView on unpkg · L1

3// Normalizes repeated corrections/suppressions/escalations/verification-gaps

4// into observation records, then promotes them to LearningCandidate records

5// (C11) only after configured recurrence AND cross-session evidence.

6//

7// Contracts:

8// * Gated by `learning.candidates.stage` — 'off' (default) means zero

template_project/.claude/hooks/task-watchdog.shView file

Lines 107-147text

107// Every read below is async on purpose: a sync read on a stalled mount would

108// block the loop and the timer below would never fire.

109const HOOK_DEADLINE_MS = Number.parseInt(process.env.UKIT_HOOK_DEADLINE_MS || '', 10) || 3000;

110setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();

111

112(async () => {

113 // BUG-C21-04: the staged-payload read must be async too — a sync

114 // readFileSync on a stalled mount parks the event loop and the deadline

115 // above can never fire (orphan node grandchild).

116 let rawInput = '';

117 try { rawInput = await fsp.readFile(process.env.INPUT_FILE || '', 'utf8'); } catch {}

scripts/audit/decision-coverage.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/audit/decision-coverage.mjs#virtual:normalized:round1View on unpkg

package.jsonView file

Lines 27-67json

27 "url": "https://github.com/lengockhoa/UKit/issues"

28 },

29 "files": [

30 "bin/",

31 "src/",

32 "scripts/",

33 "template_project/",

Source & flagged code

7 flagged · loading source

scripts/bench/runGold.mjsView file

121const rootDir = projectRoot ?? REPO_ROOT; L122: const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js')); L123: const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/bench/runGold.mjsView on unpkg · L121

src/core/memory/learningCandidates.jsView file

1// learningCandidates.js — M04.2 learning candidates (SPEC §5 FR-016, FR-018; C11). L2: //

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/memory/learningCandidates.jsView on unpkg · L1

template_project/.claude/hooks/task-watchdog.shView file

Findings

2 High4 Medium6 Low

HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh

HighSemantic Analysis Limitedscripts/audit/decision-coverage.mjs#virtual:normalized:round1

MediumDynamic Requirescripts/bench/runGold.mjs

MediumEnvironment Vars

MediumShips Build Helpertemplate_project/.claude/hooks/task-watchdog.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptosrc/core/memory/learningCandidates.js

LowFilesystem

LowHigh Entropy Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencetemplate_project/.claude/hooks/task-watchdog.sh

Affected versions and remediation

This report applies to @ngockhoale/ukit@3.1.0.

See all versions of @ngockhoale/ukit for other recorded verdicts.

Review the evidence and your use of @ngockhoale/ukit@3.1.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 01:00:04.730Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.