registry / @specship/specship-darwin-x64 / 0.18.0

@specship/specship-darwin-x64@0.18.0

SpecShip self-contained bundle for darwin-x64

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `specship` with no arguments, `specship install`, or `specship update`.

Impact

Changes Claude Code configuration and enables package-provided command hooks; update can execute package-manager or shell installation commands.

Mechanism

Explicit Claude Code extension setup and self-update execution.

Rationale

No concrete malicious install-time behavior was found, but the package has explicit AI-agent configuration mutation and remote self-update capability. Downgrade to warn under the firewall policy for explicit user-command agent config mutation.

Evidence

package.jsonbin/specshiplib/dist/bin/specship.jslib/dist/installer/index.jslib/dist/installer/targets/claude.jslib/dist/update/resolve-latest.jslib/dist/update/run-installer.js~/.claude.json~/.claude/settings.json~/.claude/CLAUDE.md~/.claude/commands/specship/*~/.claude/agents/specship-explorer.md./.mcp.json./.claude/settings.json./CLAUDE.md./.claude/commands/specship/*./.claude/agents/specship-explorer.md./.specship

Network endpoints3

registry.npmjs.org/@specship/specshipgithub.com/selvakumarEsra/specship/releases/latestraw.githubusercontent.com/selvakumarEsra/specship/main/install.sh

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`lib/dist/bin/specship.js` registers explicit `install` and no-argument setup flows.
`lib/dist/installer/targets/claude.js` writes MCP config, Claude hooks, commands, an agent file, and `CLAUDE.md` content.
Installed hooks run `specship sync --quiet`, `specship spec-nudge`, and `specship steer-nudge` in Claude Code.
`specship update` fetches release metadata and can invoke npm or a GitHub-hosted shell installer.

Evidence against

Root `package.json` has no lifecycle scripts, so npm installation does not trigger setup.
Agent-control changes are reached only through explicit CLI use; interactive setup prompts for scope and permissions.
The installer targets its own `specship` entries and preserves unrelated configuration.
Optional JIRA and Designer integrations are off by default; no source evidence of credential harvesting or covert exfiltration.
The dynamic worker import is a normal static `worker_threads`/`fs` UI worker; WASM and font blobs are package assets.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 224 file(s), 3.07 MB of source, external domains: 127.0.0.1, acme.atlassian.net, claude.ai, cli.github.com, docs.claude.com, github.com, raw.githubusercontent.com, reactjs.org, registry.npmjs.org, www.w3.org

Source & flagged code

9 flagged

lib/dist/update/run-installer.jsView file

Lines 1-32javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.installerCommand = installerCommand;

4exports.runInstaller = runInstaller;

5/**

6 * The real installer adapter for `specship update` (REQ-CLI-UPDATE-002).

7 *

8 * `installerCommand` is pure (built + tested here); `runInstaller` is the thin

9 * spawn wrapper the CLI drives. A non-zero exit rejects, which `runUpdate`

10 * surfaces as a clean failure that leaves the existing install intact

11 * (REQ-CLI-UPDATE-004.A2).

12 */

13const node_child_process_1 = require("node:child_process");

14const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

15function installerCommand(method, env) {

16 if (method === 'npm') {

17 return { command: 'npm', args: ['i', '-g', '@specship/specship@latest'], extraEnv: {} };

18 }

19 // bundle: re-run install.sh, threading the existing install/bin dirs through

20 // so the update lands exactly where the original install did.

21 return {

22 command: 'sh',

23 args: ['-c', updater_1.BUNDLE_INSTALL_CMD],

24 extraEnv: { SPECSHIP_INSTALL_DIR: env.installDir, SPECSHIP_BIN_DIR: env.binDir },

25 };

26}

27function runInstaller(method, env) {

28 const { command, args, extraEnv } = installerCommand(method, env);

29 return new Promise((resolve, reject) => {

30 const child = (0, node_child_process_1.spawn)(command, args, {

31 stdio: 'inherit',

32 env: { ...process.env, ...extraEnv },

lib/dist/bin/specship.jsView file

Lines 230-270javascript

230 const files = fs.readdirSync(path.join(claudeRoot, slug), { withFileTypes: true });

231 for (const f of files) {

232 if (!f.isFile() || !f.name.toLowerCase().

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 108-148javascript

108 // only have one target to write.

109 if (opts.target !== undefined

110 && !['claude', 'auto', 'all'].includes(opts.target)) {

111 throw new Error(`Unknown --target value "${opts.target

nodeView file

•path = node kind = native_binary sizeBytes = 122894848 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg

Source & flagged code

9 flagged · loading source

lib/dist/update/run-installer.jsView file

12*/ L13: const node_child_process_1 = require("node:child_process"); L14: const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

lib/dist/bin/specship.jsView file

250// eslint-disable-next-line @typescript-eslint/no-implied-eval L251: const importESM = new Function('specifier', 'return import(specifier)'); L252: // Block SpecShip on Node.js 25.x — V8's turboshaft WASM JIT has a Zone

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/dist/bin/specship.jsView on unpkg · L250

lib/dist/ui/shimmer-worker.jsView file

2Object.defineProperty(exports, "__esModule", { value: true }); L3: const worker_threads_1 = require("worker_threads"); L4: const fs_1 = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/dist/ui/shimmer-worker.jsView on unpkg · L2

lib/dist/designer/cdp-ensure.jsView file

9const node_path_1 = __importDefault(require("node:path")); L10: const node_child_process_1 = require("node:child_process"); L11: const cross_platform_1 = require("./cross-platform"); L12: const cdp_env_1 = require("./cdp-env"); L13: const PORT = process.env.DESIGNER_CDP || '9222'; L14: const PROFILE = node_path_1.default.join(node_os_1.default.homedir(), '.chrome-designer-profile'); ... L17: try { L18: const res = await fetch(`http://127.0.0.1:${PORT}/json/version`, { signal: AbortSignal.timeout(1500) }); L19: return res.ok;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/dist/designer/cdp-ensure.jsView on unpkg · L9

lib/dist/installer/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @specship/specship-darwin-x64@0.17.0 matchedIdentity = npm:[redacted]:0.17.0 similarity = 0.942 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/dist/installer/index.jsView on unpkg

128try { L129: (0, child_process_1.execSync)('npm install -g @specship/specship', { stdio: 'pipe', windowsHide: true }); L130: s.stop('Installed specship CLI on PATH');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/dist/installer/index.jsView on unpkg · L128

nodeView file

•path = node kind = native_binary sizeBytes = 122894848 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg

Findings

1 Critical5 High6 Medium4 Low

CriticalPrevious Version Dangerous Deltalib/dist/installer/index.js

HighChild Processlib/dist/update/run-installer.js

HighShell

HighSame File Env Network Executionlib/dist/designer/cdp-ensure.js

HighRuntime Package Installlib/dist/installer/index.js

HighShips High Entropy Bloblib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2

MediumDynamic Requirelib/dist/ui/shimmer-worker.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarynode

MediumShips Wasm Modulelib/dist/extraction/wasm/tree-sitter-scala.wasm

MediumStructural Risk Force Deep Review

LowEvallib/dist/bin/specship.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

lib/dist/update/run-installer.jsView file

Lines 1-32javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.installerCommand = installerCommand;

4exports.runInstaller = runInstaller;

5/**

6 * The real installer adapter for `specship update` (REQ-CLI-UPDATE-002).

7 *

8 * `installerCommand` is pure (built + tested here); `runInstaller` is the thin

9 * spawn wrapper the CLI drives. A non-zero exit rejects, which `runUpdate`

10 * surfaces as a clean failure that leaves the existing install intact

11 * (REQ-CLI-UPDATE-004.A2).

12 */

13const node_child_process_1 = require("node:child_process");

14const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

15function installerCommand(method, env) {

16 if (method === 'npm') {

17 return { command: 'npm', args: ['i', '-g', '@specship/specship@latest'], extraEnv: {} };

18 }

19 // bundle: re-run install.sh, threading the existing install/bin dirs through

20 // so the update lands exactly where the original install did.

21 return {

22 command: 'sh',

23 args: ['-c', updater_1.BUNDLE_INSTALL_CMD],

24 extraEnv: { SPECSHIP_INSTALL_DIR: env.installDir, SPECSHIP_BIN_DIR: env.binDir },

25 };

26}

27function runInstaller(method, env) {

28 const { command, args, extraEnv } = installerCommand(method, env);

29 return new Promise((resolve, reject) => {

30 const child = (0, node_child_process_1.spawn)(command, args, {

31 stdio: 'inherit',

32 env: { ...process.env, ...extraEnv },

lib/dist/bin/specship.jsView file

Lines 230-270javascript

230 const files = fs.readdirSync(path.join(claudeRoot, slug), { withFileTypes: true });

231 for (const f of files) {

232 if (!f.isFile() || !f.name.toLowerCase().

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 108-148javascript

108 // only have one target to write.

109 if (opts.target !== undefined

110 && !['claude', 'auto', 'all'].includes(opts.target)) {

111 throw new Error(`Unknown --target value "${opts.target

nodeView file

•path = node kind = native_binary sizeBytes = 122894848 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg