registry / @specship/specship-linux-arm64 / 0.15.0

@specship/specship-linux-arm64@0.15.0

SpecShip self-contained bundle for linux-arm64

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time malicious behavior is established, but the package provides an explicit installer for a Claude Code MCP extension. It can add package-owned auto-allowed MCP permissions and hooks after user invocation.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs specship with no args, specship install, specship update, or specship uninstall.

Impact

Claude Code may auto-run SpecShip sync/status/nudge commands and allow SpecShip MCP tools; update may install latest SpecShip globally.

Mechanism

first-party Claude Code MCP extension setup and self-update commands

Rationale

Source inspection shows potentially risky agent-extension lifecycle behavior, but it is first-party and user-invoked with no package lifecycle hook. This fits a warn-level agent extension risk rather than malicious publish blocking.

Evidence

package.jsonbin/specshiplib/package.jsonlib/dist/bin/specship.jslib/dist/installer/index.jslib/dist/installer/targets/claude.jslib/dist/installer/targets/shared.jslib/dist/update/run-installer.jslib/dist/jira/config.js~/.claude.json./.mcp.json~/.claude/settings.json./.claude/settings.json~/.claude/commands/specship/explore.md./.claude/commands/specship/explore.md~/.claude/agents/specship-explorer.md./.claude/agents/specship-explorer.md~/.specship/jira.json./.specship

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

lib/dist/bin/specship.js runs installer when invoked with no args, not via npm lifecycle.
lib/dist/installer/targets/claude.js writes Claude MCP config, permissions, hooks, slash commands, subagent, and optional status line.
lib/dist/installer/targets/shared.js auto-allows mcp__specship__ tools including designer_* tools.
lib/dist/installer/index.js can run npm install -g @specship/specship during interactive install and update flows.
lib/dist/update/run-installer.js spawns npm i -g @specship/specship@latest or shell install command only through specship update.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks.
bin/specship only execs bundled node with lib/dist/bin/specship.js on explicit user invocation.
Installer prompts unless --yes/flags are supplied and targets first-party SpecShip Claude integration.
Claude writes are scoped to specship entries and marker-owned hooks/commands; uninstall removes matching owned entries.
JIRA credentials are saved only via explicit specship jira configure and chmod 0600.
No hardcoded exfiltration endpoint or credential harvesting loop found in inspected files.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 222 file(s), 3.04 MB of source, external domains: 127.0.0.1, acme.atlassian.net, claude.ai, cli.github.com, docs.claude.com, github.com, raw.githubusercontent.com, reactjs.org, registry.npmjs.org, www.w3.org

Source & flagged code

9 flagged

lib/dist/update/run-installer.jsView file

Lines 1-32javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.installerCommand = installerCommand;

4exports.runInstaller = runInstaller;

5/**

6 * The real installer adapter for `specship update` (REQ-CLI-UPDATE-002).

7 *

8 * `installerCommand` is pure (built + tested here); `runInstaller` is the thin

9 * spawn wrapper the CLI drives. A non-zero exit rejects, which `runUpdate`

10 * surfaces as a clean failure that leaves the existing install intact

11 * (REQ-CLI-UPDATE-004.A2).

12 */

13const node_child_process_1 = require("node:child_process");

14const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

15function installerCommand(method, env) {

16 if (method === 'npm') {

17 return { command: 'npm', args: ['i', '-g', '@specship/specship@latest'], extraEnv: {} };

18 }

19 // bundle: re-run install.sh, threading the existing install/bin dirs through

20 // so the update lands exactly where the original install did.

21 return {

22 command: 'sh',

23 args: ['-c', updater_1.BUNDLE_INSTALL_CMD],

24 extraEnv: { SPECSHIP_INSTALL_DIR: env.installDir, SPECSHIP_BIN_DIR: env.binDir },

25 };

26}

27function runInstaller(method, env) {

28 const { command, args, extraEnv } = installerCommand(method, env);

29 return new Promise((resolve, reject) => {

30 const child = (0, node_child_process_1.spawn)(command, args, {

31 stdio: 'inherit',

32 env: { ...process.env, ...extraEnv },

lib/dist/bin/specship.jsView file

Lines 230-270javascript

230 const files = fs.readdirSync(path.join(claudeRoot, slug), { withFileTypes: true });

231 for (const f of files) {

232 if (!f.isFile() || !f.name.toLowerCase().

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 108-148javascript

108 // only have one target to write.

109 if (opts.target !== undefined

110 && !['claude', 'auto', 'all'].includes(opts.target)) {

111 throw new Error(`Unknown --target value "${opts.target

nodeView file

•path = node kind = native_binary sizeBytes = 121333752 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg

Source & flagged code

9 flagged · loading source

lib/dist/update/run-installer.jsView file

12*/ L13: const node_child_process_1 = require("node:child_process"); L14: const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

lib/dist/bin/specship.jsView file

250// eslint-disable-next-line @typescript-eslint/no-implied-eval L251: const importESM = new Function('specifier', 'return import(specifier)'); L252: // Block SpecShip on Node.js 25.x — V8's turboshaft WASM JIT has a Zone

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/dist/bin/specship.jsView on unpkg · L250

lib/dist/ui/shimmer-worker.jsView file

2Object.defineProperty(exports, "__esModule", { value: true }); L3: const worker_threads_1 = require("worker_threads"); L4: const fs_1 = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/dist/ui/shimmer-worker.jsView on unpkg · L2

lib/dist/designer/cdp-ensure.jsView file

9const node_path_1 = __importDefault(require("node:path")); L10: const node_child_process_1 = require("node:child_process"); L11: const cross_platform_1 = require("./cross-platform"); L12: const cdp_env_1 = require("./cdp-env"); L13: const PORT = process.env.DESIGNER_CDP || '9222'; L14: const PROFILE = node_path_1.default.join(node_os_1.default.homedir(), '.chrome-designer-profile'); ... L17: try { L18: const res = await fetch(`http://127.0.0.1:${PORT}/json/version`, { signal: AbortSignal.timeout(1500) }); L19: return res.ok;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/dist/designer/cdp-ensure.jsView on unpkg · L9

lib/dist/installer/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @specship/specship-linux-arm64@0.12.1 matchedIdentity = npm:[redacted]:0.12.1 similarity = 0.850 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/dist/installer/index.jsView on unpkg

128try { L129: (0, child_process_1.execSync)('npm install -g @specship/specship', { stdio: 'pipe', windowsHide: true }); L130: s.stop('Installed specship CLI on PATH');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/dist/installer/index.jsView on unpkg · L128

nodeView file

•path = node kind = native_binary sizeBytes = 121333752 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg

Findings

1 Critical5 High6 Medium4 Low

CriticalPrevious Version Dangerous Deltalib/dist/installer/index.js

HighChild Processlib/dist/update/run-installer.js

HighShell

HighSame File Env Network Executionlib/dist/designer/cdp-ensure.js

HighRuntime Package Installlib/dist/installer/index.js

HighShips High Entropy Bloblib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2

MediumDynamic Requirelib/dist/ui/shimmer-worker.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarynode

MediumShips Wasm Modulelib/dist/extraction/wasm/tree-sitter-scala.wasm

MediumStructural Risk Force Deep Review

LowEvallib/dist/bin/specship.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

lib/dist/update/run-installer.jsView file

Lines 1-32javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.installerCommand = installerCommand;

4exports.runInstaller = runInstaller;

5/**

6 * The real installer adapter for `specship update` (REQ-CLI-UPDATE-002).

7 *

8 * `installerCommand` is pure (built + tested here); `runInstaller` is the thin

9 * spawn wrapper the CLI drives. A non-zero exit rejects, which `runUpdate`

10 * surfaces as a clean failure that leaves the existing install intact

11 * (REQ-CLI-UPDATE-004.A2).

12 */

13const node_child_process_1 = require("node:child_process");

14const updater_1 = require("./updater");

High

Child Process

Package source references child process execution.

lib/dist/update/run-installer.jsView on unpkg · L12

15function installerCommand(method, env) {

16 if (method === 'npm') {

17 return { command: 'npm', args: ['i', '-g', '@specship/specship@latest'], extraEnv: {} };

18 }

19 // bundle: re-run install.sh, threading the existing install/bin dirs through

20 // so the update lands exactly where the original install did.

21 return {

22 command: 'sh',

23 args: ['-c', updater_1.BUNDLE_INSTALL_CMD],

24 extraEnv: { SPECSHIP_INSTALL_DIR: env.installDir, SPECSHIP_BIN_DIR: env.binDir },

25 };

26}

27function runInstaller(method, env) {

28 const { command, args, extraEnv } = installerCommand(method, env);

29 return new Promise((resolve, reject) => {

30 const child = (0, node_child_process_1.spawn)(command, args, {

31 stdio: 'inherit',

32 env: { ...process.env, ...extraEnv },

lib/dist/bin/specship.jsView file

Lines 230-270javascript

230 const files = fs.readdirSync(path.join(claudeRoot, slug), { withFileTypes: true });

231 for (const f of files) {

232 if (!f.isFile() || !f.name.toLowerCase().

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 108-148javascript

108 // only have one target to write.

109 if (opts.target !== undefined

110 && !['claude', 'auto', 'all'].includes(opts.target)) {

111 throw new Error(`Unknown --target value "${opts.target

nodeView file

•path = node kind = native_binary sizeBytes = 121333752 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View file

•path = lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2 kind = high_entropy_blob sizeBytes = 7716 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/dist/ui/assets/geist-mono-vietnamese-wght-normal-D8KDMBhC.woff2View on unpkg