registry / @specship/specship-linux-x64 / 0.11.9

@specship/specship-linux-x64@0.11.9

SpecShip self-contained bundle for linux-x64

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Confirmed agent-extension setup exists, but it is user-invoked and package-aligned rather than npm lifecycle-delivered. Residual risk is Claude Code control-surface expansion through MCP tools, auto-allow permissions, hooks, commands, and optional CLAUDE.md guidance.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `specship install` or install-related CLI flags.

Impact

Adds SpecShip MCP tools and optional automation into Claude Code; could affect agent behavior in opted-in projects or globally.

Mechanism

Claude Code MCP/commands/hooks installer

Policy narrative

A user invoking the SpecShip installer can have Claude Code configured with a SpecShip MCP server, allowed MCP tools, auto-sync hooks, slash commands, and a subagent. This is an agent extension lifecycle risk, but source inspection shows no npm lifecycle hook or silent install-time write into Claude/Codex/Cursor control surfaces.

Rationale

The suspicious primitives are real but are tied to an explicit SpecShip installer and are package-aligned; the package does not silently mutate foreign agent surfaces during npm install. This should warn for agent-extension lifecycle risk rather than block as malicious.

Evidence

package.jsonbin/specshiplib/package.jsonlib/dist/bin/specship.jslib/dist/installer/index.jslib/dist/installer/targets/claude.jslib/dist/installer/targets/shared.jslib/dist/.claude-plugin/plugin.jsonlib/dist/hooks/hooks.jsonlib/dist/commands/specship/explore.md./.mcp.json~/.claude.json./.claude/settings.json~/.claude/settings.json./.claude/commands/specship/explore.md./.claude/agents/specship-explorer.md./CLAUDE.md.specship/

Network endpoints3

127.0.0.1:<port>/json/list127.0.0.1:9222/json/versionclaude.ai/design

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

User-invoked installer writes Claude Code MCP config to ./.mcp.json or ~/.claude.json in lib/dist/installer/targets/claude.js.
Installer can add Claude settings permissions and hooks running `specship sync --quiet` after edits and at session start.
Installer copies package slash commands and an agent into ./.claude or ~/.claude command/agent dirs.
`--sdd` opt-in writes a CLAUDE.md steering block and UserPromptSubmit hook `specship spec-nudge`.
`specship install` may run `npm install -g @specship/specship`, but only after interactive confirmation.

Evidence against

Root package.json has no npm lifecycle scripts, so no install-time execution on package install.
Default CLI entry bin/specship only execs bundled node with lib/dist/bin/specship.js on user invocation.
Claude writes are reached through explicit `specship install`, with prompts or flags; not automatic npm lifecycle mutation.
MCP config points to local command `specship serve --mcp`, not a remote endpoint.
Network use found is package-aligned local UI/CDP or Claude design integration, not credential exfiltration.
No credential harvesting, destructive behavior, remote payload download, or broad persistence confirmed.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 342 file(s), 4.07 MB of source, external domains: 127.0.0.1, angular.dev, claude.ai, docs.claude.com, github.com, mcp.sentry.dev, www.w3.org

Oversized source lightweight scan

lib/dist/web/chunk-JTFXTIPE.js3.48 MB file, sampled 256 KB

ChildProcessEnvironmentVarsShellObfuscatedHighEntropyStringsMinified

Source & flagged code

9 flagged

lib/dist/health/smoke-check.jsView file

Lines 36-76javascript

36 };

37 return ownKeys(o);

38 };

39 return function (mod) {

40 if (mod && mod.__esModule) return mod;

41 var result = {};

42 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

43 __setModuleDefault(result, mod);

44 return result;

45 };

46})();

47Object.defineProperty(exports, "__esModule", { value: true });

48exports.probeBackend = probeBackend;

49exports.probeFts5 = probeFts5;

50exports.probeMcpBoot = probeMcpBoot;

51exports.probeIndexQueryable = probeIndexQueryable;

52exports.runSmokeCheck = runSmokeCheck;

53exports.doctorExitCode = doctorExitCode;

54const fs = __importStar(require("fs"));

55const os = __importStar(require("os"));

56const path = __importStar(require("path"));

57const child_process_1 = require("child_process");

58const sqlite_adapter_1 = require("../db/sqlite-adapter");

High

Child Process

Package source references child process execution.

lib/dist/health/smoke-check.jsView on unpkg · L56

59const directory_1 = require("../directory");

60const FTS5_REMEDIATION = 'Use the published bundle (node 24 with FTS5) or, when running from source, ' +

61 '`npm install --save-dev better-sqlite3` so FTS5 works on a host Node built without it.';

62/** Open a throwaway SQLite db, hand it to `fn`, then clean up the file + WAL/SHM. */

63function withTempDb(fn) {

64 const tmp = path.join(os.tmpdir(), `specship-smoke-${process.pid}-${process.hrtime.bigint()}.db`);

65 let created;

66 try {

67 created = (0, sqlite_adapter_1.createDatabase)(tmp);

68 return fn(created);

69 }

70 finally {

71 try {

72 created?.db.close();

73 }

74 catch {

75 /* best effort */

76 }

lib/dist/bin/specship.jsView file

Lines 275-315javascript

275 for (let depth = 0; depth < 6; depth++) {

276 candidates.push(path.join(cur, 'dist', 'web'));

277 candidates.push(path.join(cur, 'packages', 'server', 'public',

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 105-145javascript

105 // only have one target to write.

106 if (opts.target !== undefined

107 && !['claude', 'auto', 'all'].includes(opts.target)) {

108 throw new Error(`Unknown --target value "${opts.target

nodeView file

•path = node kind = native_binary sizeBytes = 123438592 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/web/chunk-JTFXTIPE.jsView file

•path = lib/dist/web/chunk-JTFXTIPE.js kind = oversized_source_file sizeBytes = 3651043 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/dist/web/chunk-JTFXTIPE.jsView on unpkg

Source & flagged code

9 flagged · loading source

lib/dist/health/smoke-check.jsView file

56const path = __importStar(require("path")); L57: const child_process_1 = require("child_process"); L58: const sqlite_adapter_1 = require("../db/sqlite-adapter");

High

Child Process

Package source references child process execution.

lib/dist/health/smoke-check.jsView on unpkg · L56

lib/dist/bin/specship.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @specship/specship-linux-x64@0.11.8 matchedIdentity = npm:[redacted]:0.11.8 similarity = 0.942 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/dist/bin/specship.jsView on unpkg

295// eslint-disable-next-line @typescript-eslint/no-implied-eval L296: const importESM = new Function('specifier', 'return import(specifier)'); L297: // Block SpecShip on Node.js 25.x — V8's turboshaft WASM JIT has a Zone

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/dist/bin/specship.jsView on unpkg · L295

lib/dist/ui/shimmer-worker.jsView file

2Object.defineProperty(exports, "__esModule", { value: true }); L3: const worker_threads_1 = require("worker_threads"); L4: const fs_1 = require("fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/dist/ui/shimmer-worker.jsView on unpkg · L2

lib/dist/designer/cdp-ensure.jsView file

9const node_path_1 = __importDefault(require("node:path")); L10: const node_child_process_1 = require("node:child_process"); L11: const cross_platform_1 = require("./cross-platform"); L12: const cdp_env_1 = require("./cdp-env"); L13: const PORT = process.env.DESIGNER_CDP || '9222'; L14: const PROFILE = node_path_1.default.join(node_os_1.default.homedir(), '.chrome-designer-profile'); ... L17: try { L18: const res = await fetch(`http://127.0.0.1:${PORT}/json/version`, { signal: AbortSignal.timeout(1500) }); L19: return res.ok;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/dist/designer/cdp-ensure.jsView on unpkg · L9

lib/dist/installer/index.jsView file

125try { L126: (0, child_process_1.execSync)('npm install -g @specship/specship', { stdio: 'pipe', windowsHide: true }); L127: s.stop('Installed specship CLI on PATH');

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/dist/installer/index.jsView on unpkg · L125

nodeView file

•path = node kind = native_binary sizeBytes = 123438592 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/web/chunk-JTFXTIPE.jsView file

•path = lib/dist/web/chunk-JTFXTIPE.js kind = oversized_source_file sizeBytes = 3651043 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/dist/web/chunk-JTFXTIPE.jsView on unpkg

Findings

1 Critical5 High7 Medium6 Low

CriticalPrevious Version Dangerous Deltalib/dist/bin/specship.js

HighChild Processlib/dist/health/smoke-check.js

HighShell

HighSame File Env Network Executionlib/dist/designer/cdp-ensure.js

HighRuntime Package Installlib/dist/installer/index.js

HighOversized Source Filelib/dist/web/chunk-JTFXTIPE.js

MediumDynamic Requirelib/dist/ui/shimmer-worker.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Native Binarynode

MediumShips Wasm Modulelib/dist/extraction/wasm/tree-sitter-scala.wasm

MediumStructural Risk Force Deep Review

LowEvallib/dist/bin/specship.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

9 flagged

lib/dist/health/smoke-check.jsView file

Lines 36-76javascript

36 };

37 return ownKeys(o);

38 };

39 return function (mod) {

40 if (mod && mod.__esModule) return mod;

41 var result = {};

42 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

43 __setModuleDefault(result, mod);

44 return result;

45 };

46})();

47Object.defineProperty(exports, "__esModule", { value: true });

48exports.probeBackend = probeBackend;

49exports.probeFts5 = probeFts5;

50exports.probeMcpBoot = probeMcpBoot;

51exports.probeIndexQueryable = probeIndexQueryable;

52exports.runSmokeCheck = runSmokeCheck;

53exports.doctorExitCode = doctorExitCode;

54const fs = __importStar(require("fs"));

55const os = __importStar(require("os"));

56const path = __importStar(require("path"));

57const child_process_1 = require("child_process");

58const sqlite_adapter_1 = require("../db/sqlite-adapter");

High

Child Process

Package source references child process execution.

lib/dist/health/smoke-check.jsView on unpkg · L56

59const directory_1 = require("../directory");

60const FTS5_REMEDIATION = 'Use the published bundle (node 24 with FTS5) or, when running from source, ' +

61 '`npm install --save-dev better-sqlite3` so FTS5 works on a host Node built without it.';

62/** Open a throwaway SQLite db, hand it to `fn`, then clean up the file + WAL/SHM. */

63function withTempDb(fn) {

64 const tmp = path.join(os.tmpdir(), `specship-smoke-${process.pid}-${process.hrtime.bigint()}.db`);

65 let created;

66 try {

67 created = (0, sqlite_adapter_1.createDatabase)(tmp);

68 return fn(created);

69 }

70 finally {

71 try {

72 created?.db.close();

73 }

74 catch {

75 /* best effort */

76 }

lib/dist/bin/specship.jsView file

Lines 275-315javascript

275 for (let depth = 0; depth < 6; depth++) {

276 candidates.push(path.join(cur, 'dist', 'web'));

277 candidates.push(path.join(cur, 'packages', 'server', 'public',

lib/dist/ui/shimmer-worker.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const worker_threads_1 = require("worker_threads");

4const fs_1 = require("fs");

Medium

lib/dist/designer/cdp-ensure.jsView file

Lines 1-29javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

lib/dist/installer/index.jsView file

Lines 105-145javascript

105 // only have one target to write.

106 if (opts.target !== undefined

107 && !['claude', 'auto', 'all'].includes(opts.target)) {

108 throw new Error(`Unknown --target value "${opts.target

nodeView file

•path = node kind = native_binary sizeBytes = 123438592 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

nodeView on unpkg

lib/dist/extraction/wasm/tree-sitter-scala.wasmView file

•path = lib/dist/extraction/wasm/tree-sitter-scala.wasm kind = wasm_module sizeBytes = 4958320 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

lib/dist/extraction/wasm/tree-sitter-scala.wasmView on unpkg

lib/dist/web/chunk-JTFXTIPE.jsView file

•path = lib/dist/web/chunk-JTFXTIPE.js kind = oversized_source_file sizeBytes = 3651043 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/dist/web/chunk-JTFXTIPE.jsView on unpkg