registry / @raditia/craftkit / 1.60.0
@raditia/craftkit@1.60.0
AI coding skills that auto-sync across Claude Code, Cursor, Gemini CLI, and Codex CLI
AI Security Review
scanned 4d ago · by lpm-firewall-aiSource inspection confirms automatic postinstall setup and registration of CraftKit-owned Codex hooks. The behavior fits the package’s stated purpose and no concrete malicious action was established, but the unprompted global agent integration leaves residual lifecycle risk.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package runs its postinstall hook, which launches sync.sh.
Impact
The hooks can add CraftKit guidance and enforce configured workflow checks in later Codex sessions; the inspected source does not establish credential theft or destructive behavior.
Mechanism
The sync copies CraftKit hook scripts and adds their commands to the user’s Codex hook configuration for session, prompt, and tool events.
AI rationale
Source inspection confirms automatic postinstall setup and registration of CraftKit-owned Codex hooks. The behavior fits the package’s stated purpose and no concrete malicious action was established, but the unprompted global agent integration leaves residual lifecycle risk.
Evidence
package.jsonscripts/postinstall.shsync.shadapters/codex.shhooks/craftkit-codex.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The postinstall hook launches sync.sh with setup enabled.
- The sync process installs CraftKit’s Codex hook files and registers them in the Codex hooks configuration.
- The registered hook adds CraftKit rules and guidance during agent sessions and prompts.
- The hook’s profile check recognizes only CraftKit-managed, read-only agent profiles.
- The setup checklist is skipped when no terminal is available, so postinstall does not ask before syncing.
- The installer says the registered hooks should be reviewed and trusted through Codex’s hooks interface.
Evidence against
- The installed hooks and guidance are first-party CraftKit components aligned with the package’s stated cross-agent skills purpose.
- The dashboard and Playwright additions are off by default.
- The inspected behavior does not establish credential transfer, destructive actions, or unrelated hook registration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
10 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = bash scripts/postinstall.sh
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = bash scripts/postinstall.sh
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkghooks/craftkit-read-cap.jsView file
•matchType = normalized_sha256
matchedPackage = @raditia/craftkit@1.54.0
matchedPath = hooks/craftkit-read-cap.js
matchedIdentity = npm:QHJhZGl0aWEvY3JhZnRraXQ:1.54.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
Findings
6 High6 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedhooks/craftkit-codex.js#virtual:normalized:round1
HighKnown Malware Source Similarityhooks/craftkit-update-check.js
HighKnown Malware Source Similarityhooks/gate-announce-honored.js
HighKnown Malware Source Similarityhooks/craftkit-read-cap.js
HighKnown Malware Source Similarityscripts/cross-review.sh
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirehooks/craftkit-read-cap.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @raditia/craftkit@1.60.0.
See all versions of @raditia/craftkit for other recorded verdicts.
- Review the evidence and your use of @raditia/craftkit@1.60.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.