registry / @oked/claude-code / 0.6.26
@oked/claude-code@0.6.26
⚠ Under reviewOKed for Claude Code - zero-code human approval for sensitive actions
Static Scan Results
scanned 2d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
EnvironmentVarsFilesystem
UrlStrings
Source & flagged code
1 flaggeddist/cli.jsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { readfilesync, writefilesync, existssync, mkdirsync } from "fs";
import { join } from "path";
import { okedclient, oked_config_path } from "@oked/sdk";
import { claudesandboxenforced, findclaudeokedhooks, maskkey, oked_receipts_log, okedpluginbundleondisk, okedpluginisenabled, pairdevice, sandbox_init_hint, verifyreceiptsfile, writeokedconfig, } from "@oked/hook-core";
import { hook_config, hasokedcommandhook, ensureshellmatcher, ensurehooktimeout, upgradeokedhooks, upgradesettingsfile, usersettingspath, } from "./hook-config.js";
import { client_version } from "./version.js";
const default_backend_url = process.env.oked_backend_url || "https://api.oked.ai";
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/cli.jsView on unpkgFindings
1 High1 Medium4 Low
HighExternal Ai Agent Control Surface Mutationdist/cli.js
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @oked/claude-code@0.6.26.
See all versions of @oked/claude-code for other recorded verdicts.
- Review the evidence and your use of @oked/claude-code@0.6.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.