registry / @skalpelai/prosumer-hook / 0.3.20

@skalpelai/prosumer-hook@0.3.20

The lightweight Skalpel client for Claude Code / Codex. Sign in with Google, and each prompt is relayed to your hosted behavioral graph so the retrieved 'worked-vs-thrashed' fork is injected back into the model. No engine, no Python, no daemon, no binary

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 10 file(s), 101 KB of source, external domains: 127.0.0.1, graph.skalpel.ai, kvluulenvmsmcjoconyw.supabase.co

Source & flagged code

8 flagged

package.jsonView file

Lines 11-51json

11 "skalpel-prosumer-hook": "skalpel-hook.mjs",

12 "skalpel-prosumer-hook-session": "skalpel-hook-session.mjs"

13 },

14 "//files": "Must list every file install.mjs stages into ~/.skalpel/hooks — a file that is copied but not published is absent from the tarball, and staging aborts mid-way. install.test.mjs pins this.",

15 "files": [

16 "postinstall.mjs",

17 "skalpel-hook.mjs",

18 "skalpel-hook-session.mjs",

19 "skalpel-statusline.mjs",

20 "metrics.mjs",

21 "stats.mjs",

22 "login.mjs",

23 "auth.mjs",

24 "install.mjs",

25 "setup.mjs"

26 ],

27 "engines": {

28 "node": ">=18"

29 },

30 "scripts": {

31 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 "install-hook": "node install.mjs",

33 "test": "node --test install.test.mjs"

34 },

35 "repository": {

36 "type": "git",

37 "url": "git+https://github.com/skalpelai/skalpel-v3.git",

38 "directory": "prosumerV0/skalpel/client"

39 },

40 "keywords": [

41 "claude-code",

42 "codex",

43 "hook",

44 "behavioral",

45 "skalpel"

46 ],

47 "license": "UNLICENSED",

48 "publishConfig": {

49 "access": "public"

50 }

51}

Lines 1-41javascript

1#!/usr/bin/env node

2// skalpel-login — sign in with Google. Opens the browser to Supabase's Google OAuth, catches the

3// redirect on a localhost port (the standard CLI loopback, same as `gh auth login`), and saves the

4// session to ~/.skalpel/auth.json. That's the whole job: get the user signed in with Google.

5//

6// Non-secret config (safe to ship — the anon key is public by design; RLS protects the data):

7// SUPABASE_URL, SUPABASE_ANON_KEY (baked below; override via env for other projects)

8//

9// Requires (dashboard side, one-time): Google provider enabled in Supabase Auth, and

10// http://localhost + http://127.0.0.1 added to the Auth → URL Configuration redirect allowlist.

setup.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2// setup — the automatic install flow (`skalpel-prosumer setup`, also npm postinstall). Prints the

3// banner, signs you in with Google (once), reads your last 30 days of Claude Code / Codex history,

4// UPLOADS it to the hosted graph (the server judges + builds — the client stays engine-free), wires

5// the two hooks into Claude Code + Codex, and reports "you're live". Skips in CI / non-TTY (override:

6// SKALPEL_FORCE_BANNER=1). Demo timing: SKALPEL_DEMO=1.

7import {

8 createReadStream,

9 readdirSync,

10 accessSync,

11 statSync,

auth.mjsView file

Lines 1-33javascript

1// auth.mjs — the client's identity, shared by both hooks. Reads the Google sign-in session saved by

2// `skalpel-prosumer login` (~/.skalpel/auth.json), transparently REFRESHES the Supabase access token

3// when it's near expiry (so the hooks always send a valid Bearer even an hour after sign-in), and

4// returns {uid, token}. Fail-soft: returns {uid:null, token:null} when not signed in — the hooks then

5// fail open and the server returns silent. SKALPEL_USER overrides for dev (no token).

6import { readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";

7import { homedir } from "node:os";

8import { join }

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

21patternName = supabase_service_key severity = critical line = 21 matchedText = "eyJhbGc...CU";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

21patternName = supabase_service_key severity = critical line = 21 matchedText = "eyJhbGc...CU";

Critical

Secret Pattern

Supabase service role key (JWT) in login.mjs

9// Requires (dashboard side, one-time): Google provider enabled in Supabase Auth, and L10: // http://localhost + http://127.0.0.1 added to the Auth → URL Configuration redirect allowlist. L11: import { createServer } from "node:http"; ... L14: import { join } from "node:path"; L15: import { spawn } from "node:child_process"; L16: import { createHash, randomBytes } from "node:crypto"; L17: L18: const SUPABASE_URL = process.env.SUPABASE_URL || "https://kvluulenvmsmcjoconyw.supabase.co"; L19: const SUPABASE_ANON_KEY = ... L22: L23: const AUTH_PATH = join(homedir(), ".skalpel", "auth.json"); L24:

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

setup.mjsView file

21import { fileURLToPath } from "node:url"; L22: import { spawn, spawnSync } from "node:child_process"; L23: import { identity as authIdentity } from "./auth.mjs";

High

Child Process

Package source references child process execution.

setup.mjsView on unpkg · L21

551const post = (token, gzip) => L552: fetch(`${API}/ingest`, { L553: method: "POST", ... L564: // Re-run the Google login ONCE for a fresh session, then retry — instead of dead-ending the user. L565: if (r.status === 401 && !process.env.SKALPEL_USER) { L566: sp.text("Session expired — re-opening sign-in…"); L567: spawnSync("node", [join(__dir, "login.mjs")], { stdio: "inherit" }); L568: const fresh = await identity();

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

setup.mjsView on unpkg · L551

auth.mjsView file

13patternName = supabase_service_key severity = critical line = 13 matchedText = "eyJhbGc...CU";

Critical

Secret Pattern

Supabase service role key (JWT) in auth.mjs

auth.mjsView on unpkg · L13

Findings

3 Critical5 High4 Medium5 Low

CriticalCritical Secretlogin.mjs

CriticalSecret Patternlogin.mjs

CriticalSecret Patternauth.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processsetup.mjs

HighShell

HighSame File Env Network Executionsetup.mjs

HighSandbox Evasion Gated Capabilitylogin.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

8 flagged

package.jsonView file

Lines 11-51json

11 "skalpel-prosumer-hook": "skalpel-hook.mjs",

12 "skalpel-prosumer-hook-session": "skalpel-hook-session.mjs"

13 },

15 "files": [

16 "postinstall.mjs",

17 "skalpel-hook.mjs",

18 "skalpel-hook-session.mjs",

19 "skalpel-statusline.mjs",

20 "metrics.mjs",

21 "stats.mjs",

22 "login.mjs",

23 "auth.mjs",

24 "install.mjs",

25 "setup.mjs"

26 ],

27 "engines": {

28 "node": ">=18"

29 },

30 "scripts": {

31 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L31

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L31

32 "install-hook": "node install.mjs",

33 "test": "node --test install.test.mjs"

34 },

35 "repository": {

36 "type": "git",

37 "url": "git+https://github.com/skalpelai/skalpel-v3.git",

38 "directory": "prosumerV0/skalpel/client"

39 },

40 "keywords": [

41 "claude-code",

42 "codex",

43 "hook",

44 "behavioral",

45 "skalpel"

46 ],

47 "license": "UNLICENSED",

48 "publishConfig": {

49 "access": "public"

50 }

51}

Lines 1-41javascript

1#!/usr/bin/env node

2// skalpel-login — sign in with Google. Opens the browser to Supabase's Google OAuth, catches the

3// redirect on a localhost port (the standard CLI loopback, same as `gh auth login`), and saves the

4// session to ~/.skalpel/auth.json. That's the whole job: get the user signed in with Google.

5//

6// Non-secret config (safe to ship — the anon key is public by design; RLS protects the data):

7// SUPABASE_URL, SUPABASE_ANON_KEY (baked below; override via env for other projects)

8//

9// Requires (dashboard side, one-time): Google provider enabled in Supabase Auth, and

10// http://localhost + http://127.0.0.1 added to the Auth → URL Configuration redirect allowlist.

setup.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2// setup — the automatic install flow (`skalpel-prosumer setup`, also npm postinstall). Prints the

3// banner, signs you in with Google (once), reads your last 30 days of Claude Code / Codex history,

4// UPLOADS it to the hosted graph (the server judges + builds — the client stays engine-free), wires

5// the two hooks into Claude Code + Codex, and reports "you're live". Skips in CI / non-TTY (override:

6// SKALPEL_FORCE_BANNER=1). Demo timing: SKALPEL_DEMO=1.

7import {

8 createReadStream,

9 readdirSync,

10 accessSync,

11 statSync,

auth.mjsView file

Lines 1-33javascript

1// auth.mjs — the client's identity, shared by both hooks. Reads the Google sign-in session saved by

2// `skalpel-prosumer login` (~/.skalpel/auth.json), transparently REFRESHES the Supabase access token

3// when it's near expiry (so the hooks always send a valid Bearer even an hour after sign-in), and

4// returns {uid, token}. Fail-soft: returns {uid:null, token:null} when not signed in — the hooks then

5// fail open and the server returns silent. SKALPEL_USER overrides for dev (no token).

6import { readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";

7import { homedir } from "node:os";

8import { join }

Lines 531-571javascript

531 } catch {

532 /* skip unreadable */

533 }

534 }

535 // Final guard: JSON escaping inflates the body slightly, so trim the oldest kept sessions until the

536 // GZIP the body — transcripts are JSON text and compress ~3-4x, so 100MB+ of real sessions fits

537 // under the server cap without dropping ANY of them (big sessions are the richest data). The trim

538 // loop only fires if even the COMPRESSED payload exceeds the cap — for a normal user, never.

539 const { gzipSync } = await import("node:zlib");

540 let body = gzipSync(JSON.stringify({ user_id: id.uid, raw_transcripts: raw }));

541 const HARD_CAP = 90 * 1024 * 1024; // matches the server body cap; compressed size

542 while (body.length > HARD_CAP && Object.keys(raw).length > 1) {

543 const keys = Object.keys(raw); // insertion order = newest first → drop the oldest kept

544 delete raw[keys[keys.length - 1]];

545 dropped++;

546 body = gzipSync(JSON.stringify({ user_id: id.uid, raw_transcripts: raw }));

547 }

548 const kept = Object.keys(raw).length;

549 const plain = JSON.stringify({ user_id: id.uid, raw_transcripts: raw });

550 sp.text(`Building your graph from ${kept} session${kept === 1 ? "" : "s"}…`);

551 const post = (token, gzip) =>

552 fetch(`${API}/ingest`, {

553 method: "POST",

554 headers: {

555 "content-type": "application/json",

556 ...(gzip ? { "content-encoding": "gzip" } : {}),

557 ...(token ? { authorization: `Bearer ${token}` } : {}),

558 },

559 body: gzip ? body : plain,

560 });

561

562 let r = await post(id.access_token, true);

563 // SELF-HEAL on 401: token was stale AND refresh didn't recover it (refresh_token also expired).

564 // Re-run the Google login ONCE for a fresh session, then retry — instead of dead-ending the user.

565 if (r.status === 401 && !process.env.SKALPEL_USER) {

566 sp.text("Session expired — re-opening sign-in…");

567 spawnSync("node", [join(__dir, "login.mjs")], { stdio: "inherit" });

568 const fresh = await identity();

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

setup.mjsView on unpkg · L551

569 if (fresh?.access_token) r = await post(fresh.access_token, true);

570 }

571 // COMPAT: if a server that predates gzip decompression 5xx's on the gzipped body, retry it plain