@ngockhoale/ukit@3.4.8

Install/update an index-first AI workspace for Claude Code, OpenAI Codex and omp (Oh My Pi).

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The package has no npm install lifecycle hook, but its user-run installer provisions first-party agent integrations and adjusts agent settings. This warrants a warning for agent extension setup; the inspected source does not establish malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

A user runs the package's install command.

Impact

The setup changes agent workspace files and selected settings; inspected code did not establish credential exfiltration or remote execution.

Mechanism

The installer provisions selected agent assets in the project and performs targeted Claude settings repairs and gateway resilience updates.

AI rationale

Evidence

src/cli/commands/install.jssrc/cli/adapters.jssrc/core/runInstallPipeline.jssrc/core/repairBrokenHooks.jssrc/core/gatewayResilienceEnv.js.codex/settings.json.codex/settings.local.json.omp/hooks/pre/ukit-bridge.js.claude/settings.json.claude/settings.local.json

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The manifest provides a CLI entry point and lists no npm install lifecycle hook.
The CLI routes the `install` command to a setup routine for the current project.
The setup routine supports package-owned agent integrations, including Codex and Oh My Pi assets.
The install pipeline repairs certain broken Claude hooks and applies gateway resilience settings when a custom gateway is detected.

Evidence against

No concrete credential theft, destructive action, or remote payload execution was identified in the inspected source.
The agent setup is activated through the CLI install command; no npm lifecycle trigger was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 259 file(s), 2.95 MB of source, external domains: openai.unicjsc.com

Source & flagged code

6 flagged

scripts/bench/runGold.mjsView file

Lines 101-141javascript

101 failures.push(`budget: used ${packet.budget.used} > maxTokens ${maxTokens}`);

102 }

103

104 return {

105 id: testCase.id ?? '(unnamed)',

106 mode: packet.task_type,

107 expectedMode,

108 anchors: [...anchorPaths],

109 expectedAnchors,

110 anchorHits,

111 anchorMisses,

112 budgetUsed: packet.budget?.used ?? 0,

113 maxTokens,

114 routedMode: routed.mode,

115 pass: failures.length === 0,

116 failures,

117 };

118}

119

120export async function runGold({ projectRoot, corpusPath } = {}) {

121 const rootDir = projectRoot ?? REPO_ROOT;

122 const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js'));

123 const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/bench/runGold.mjsView on unpkg · L121

124 const { buildCodeIndex } = await import(path.join(REPO_ROOT, 'src/index/buildIndex.js'));

125 const { INDEX_ARTIFACTS, getArtifactPath } = await import(path.join(REPO_ROOT, 'src/index/paths.js'));

126

127 // The bench needs an index to score anchors; build once when missing.

128 try {

129 await fs.stat(getArtifactPath(rootDir, INDEX_ARTIFACTS.files));

130 } catch {

131 console.log('[bench] index missing — building code index first');

132 await buildCodeIndex({ rootDir });

133 }

134

135 const cases = await loadCorpus(corpusPath ?? DEFAULT_CORPUS);

136 const results = [];

137 for (const testCase of cases) {

138 results.push(await runGoldCase(rootDir, testCase, { compileContext, routeTask }));

139 }

140 return { results, pass: results.every((r) => r.pass) };

141}

src/core/memory/learningCandidates.jsView file

1// learningCandidates.js — M04.2 learning candidates (SPEC §5 FR-016, FR-018; C11). L2: //

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/memory/learningCandidates.jsView on unpkg · L1

template_project/.claude/hooks/task-watchdog.shView file

•path = template_project/.claude/hooks/task-watchdog.sh kind = payload_in_excluded_dir sizeBytes = 11622 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

template_project/.claude/hooks/task-watchdog.shView on unpkg

•path = template_project/.claude/hooks/task-watchdog.sh kind = build_helper sizeBytes = 11622 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

template_project/.claude/hooks/task-watchdog.shView on unpkg

scripts/audit/decision-coverage.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/audit/decision-coverage.mjs#virtual:normalized:round1View on unpkg

package.jsonView file

47"bin": { "ukit": "bin/ukit" }, "scripts": { "start": "node ./bin/ukit", "doctor": "node ./bin/ukit doctor", "diff": "node ./bin/ukit diff", "index:build": "node ./scripts/index/build-i

Medium

Suspicious Lifecycle Evidence

The manifest provides a CLI entry point and lists no npm install lifecycle hook.

package.jsonView on unpkg · L47

Source & flagged code

6 flagged · loading source

scripts/bench/runGold.mjsView file

121const rootDir = projectRoot ?? REPO_ROOT; L122: const { compileContext } = await import(path.join(REPO_ROOT, 'src/core/codeintel/compiler.js')); L123: const { routeTask } = await import(path.join(REPO_ROOT, 'src/core/codeintel/router.js'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/bench/runGold.mjsView on unpkg · L121

src/core/memory/learningCandidates.jsView file

1// learningCandidates.js — M04.2 learning candidates (SPEC §5 FR-016, FR-018; C11). L2: //

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/core/memory/learningCandidates.jsView on unpkg · L1

template_project/.claude/hooks/task-watchdog.shView file

Findings

2 High5 Medium5 Low

HighPayload In Excluded Dirtemplate_project/.claude/hooks/task-watchdog.sh

HighSemantic Analysis Limitedscripts/audit/decision-coverage.mjs#virtual:normalized:round1

MediumDynamic Requirescripts/bench/runGold.mjs

MediumEnvironment Vars

MediumShips Build Helpertemplate_project/.claude/hooks/task-watchdog.sh

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

LowScripts Present

LowWeak Cryptosrc/core/memory/learningCandidates.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @ngockhoale/ukit@3.4.8.

See all versions of @ngockhoale/ukit for other recorded verdicts.

Review the evidence and your use of @ngockhoale/ukit@3.4.8 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 01:01:12.620Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code