registry / @raditia/craftkit / 1.47.1
@raditia/craftkit@1.47.1
AI coding skills that auto-sync across Claude Code, Cursor, Gemini CLI, and Codex CLI
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe automatic lifecycle modifies first-party coding-agent integrations and can execute a remotely fetched RTK installer. The inspected behavior supports a warning for agent extension lifecycle risk; it does not establish a concrete malicious attack.
Static reason
One or more suspicious static signals were detected.
Trigger
The package's postinstall lifecycle runs during installation.
Impact
This can modify the user's coding-agent setup and install RTK without a separate manual invocation. The inspected behavior is first-party setup for the package's stated integrations, so it warrants a warning rather than a block.
Mechanism
The lifecycle invokes sync.sh, which updates agent-specific rules, skills, commands, and hooks; its setup path can fetch an installer from raw.githubusercontent.com and pipe it to the shell.
AI rationale
The automatic lifecycle modifies first-party coding-agent integrations and can execute a remotely fetched RTK installer. The inspected behavior supports a warning for agent extension lifecycle risk; it does not establish a concrete malicious attack.
Evidence
scripts/postinstall.shsync.shadapters/claude.sh
Network endpoints1
raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs scripts/postinstall.sh automatically during installation.
- The postinstall script runs sync.sh with its setup flag; sync.sh processes the Claude, Cursor, Gemini, and Codex adapters.
- The Claude adapter registers package hooks for prompt, tool-use, stop, and session-start events.
- When RTK is missing and Homebrew is unavailable, sync.sh downloads its installer and pipes it to the shell.
Evidence against
- The inspected setup installs CraftKit's own skills, rules, and hooks for the tools the package targets; no credential collection or exfiltration was found in the inspected files.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = bash scripts/postinstall.sh
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = bash scripts/postinstall.sh
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg6"postinstall": "bash scripts/postinstall.sh"
},
"engines": {
"os": ["darwin", "linux"]
},
"files":
Medium
Suspicious Lifecycle Evidence
The manifest runs scripts/postinstall.sh automatically during installation.
package.jsonView on unpkg · L6hooks/craftkit-read-cap.jsView file
Findings
2 High6 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedhooks/craftkit-platform-rules.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirehooks/craftkit-read-cap.js
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowScripts Present
LowWeak Cryptohooks/craftkit-transcript.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @raditia/craftkit@1.47.1.
See all versions of @raditia/craftkit for other recorded verdicts.
- Review the evidence and your use of @raditia/craftkit@1.47.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.