@ngockhoale/ukit@3.1.6
Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe source indicates first-party AI workspace hook and settings functionality, but the inspected evidence does not establish its caller consent or installation path. This is an unresolved agent integration risk, not evidence of active malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
A user invoking the package’s workspace setup or running an installed Claude hook.
Impact
The excerpts do not show malicious effects, but do not establish whether the hooks are installed only after explicit user consent.
Mechanism
The hooks route prompt signals and enforce task timing; package code also reads and maintains Claude settings.
AI rationale
The source indicates first-party AI workspace hook and settings functionality, but the inspected evidence does not establish its caller consent or installation path. This is an unresolved agent integration risk, not evidence of active malicious behavior.
Evidence
template_project/.claude/hooks/skill-router.shtemplate_project/.claude/hooks/task-watchdog.shsrc/core/repairBrokenHooks.jssrc/core/gatewayResilienceEnv.js
Decision evidence
public snapshotAI called this Suspicious at 56.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package describes itself as an installer and updater for AI workspaces.
- The benchmark target creates a temporary fixture project and writes its package manifest.
- The performance audit source refers to hook telemetry and configuration.
- Path handling explicitly protects Codex, Antigravity, and omp paths.
- Gateway resilience preserves user-set values in project settings.
- Hook repair examines Claude settings files and backs up files before edits.
- The skill router imports its route catalog when present.
- The watchdog source identifies itself as a handoff-task time limit hook.
Evidence against
- No install lifecycle hook is declared in package.json.
- Inspected source does not establish credential theft, destructive behavior, or an unconsented broad control-surface mutation.
- The reviewed hook behavior is part of the package’s workspace tooling, but the supplied excerpts do not resolve its complete installation and consent path.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
6 flagged · loading sourcescripts/bench/runGold.mjsView file
121const rootDir = projectRoot ?? REPO_ROOT;
L122: const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js'));
L123: const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
scripts/bench/runGold.mjsView on unpkg · L121src/core/memory/learningCandidates.jsView file
1// learningCandidates.js — M04.2 learning candidates (SPEC §5 FR-016, FR-018; C11).
L2: //
Low
Weak Crypto
Package source references weak cryptographic algorithms.
src/core/memory/learningCandidates.jsView on unpkg · L1template_project/.claude/hooks/task-watchdog.shView file
Findings
2 High5 Medium5 Low
HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh
HighSemantic Analysis Limitedscripts/audit/decision-coverage.mjs#virtual:normalized:round1
MediumDynamic Requirescripts/bench/runGold.mjs
MediumEnvironment Vars
MediumShips Build Helpertemplate_project/.claude/hooks/task-watchdog.sh
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
LowScripts Present
LowWeak Cryptosrc/core/memory/learningCandidates.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @ngockhoale/ukit@3.1.6.
See all versions of @ngockhoale/ukit for other recorded verdicts.
- Review the evidence and your use of @ngockhoale/ukit@3.1.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.