registry / @raditia/craftkit / 1.59.0
@raditia/craftkit@1.59.0
AI coding skills that auto-sync across Claude Code, Cursor, Gemini CLI, and Codex CLI
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe automatic postinstall integration registers CraftKit-owned agent hooks, which warrants a warning for agent extension lifecycle risk. The inspected behavior is first-party integration setup, and the source does not establish a concrete attack or justify blocking publication.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Installing the package through npm invokes its postinstall hook.
Impact
The integration adds package-owned behavior to later agent sessions and tool events, creating an agent extension lifecycle risk without evidence of malicious control or data theft.
Mechanism
The hook runs sync.sh with agent setup enabled; the Codex adapter copies CraftKit hook scripts and registers them for supported Codex events.
AI rationale
The automatic postinstall integration registers CraftKit-owned agent hooks, which warrants a warning for agent extension lifecycle risk. The inspected behavior is first-party integration setup, and the source does not establish a concrete attack or justify blocking publication.
Evidence
package.jsonscripts/postinstall.shsync.shadapters/codex.sh
Network endpoints1
registry.npmjs.org/@raditia/craftkit/latest
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package postinstall runs its sync script with agent setup enabled.
- The Codex adapter installs CraftKit hooks and registers them for session, prompt, tool, and turn events.
- The inspected agent-profile check only reads a profile and recognizes CraftKit-managed read-only profiles; this is guarded first-party integration behavior.
- The update check contacts the package's npm registry endpoint to report a newer version.
- The cross-review script excludes untracked files, including environment files, from its review input.
Evidence against
- The inspected sources do not establish credential theft, unrelated data exfiltration, destructive behavior, or remote payload execution.
- The Codex profile check itself reads a profile file and does not modify it.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
11 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = bash scripts/postinstall.sh
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = bash scripts/postinstall.sh
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkghooks/craftkit-read-cap.jsView file
•matchType = normalized_sha256
matchedPackage = @raditia/craftkit@1.54.0
matchedPath = hooks/craftkit-read-cap.js
matchedIdentity = npm:QHJhZGl0aWEvY3JhZnRraXQ:1.54.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
Findings
7 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedhooks/craftkit-codex.js#virtual:normalized:round1
HighKnown Malware Source Similarityhooks/craftkit-update-check.js
HighKnown Malware Source Similarityhooks/gate-announce-honored.js
HighKnown Malware Source Similarityhooks/craftkit-read-cap.js
HighKnown Malware Source Similarityscripts/cross-review.sh
HighPrevious Version Dangerous Deltahooks/craftkit-codex.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirehooks/craftkit-read-cap.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helper
Affected versions and remediation
This report applies to @raditia/craftkit@1.59.0.
See all versions of @raditia/craftkit for other recorded verdicts.
- Review the evidence and your use of @raditia/craftkit@1.59.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.