@straion/cli@0.0.29
> **Note:** This CLI is currently in early access. Features may change and we appreciate your feedback. For questions or issues, please contact [support@straion.com](mailto:support@straion.com).
AI Security Review
scanned 28d ago · by lpm-firewall-aiSource shows explicit agent setup and session-end trajectory collection, with no npm lifecycle trigger or concrete malicious behavior established. The guarded agent configuration capability warrants a warning under the agent integration policy.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs `straion setup` and selects or accepts agent integrations; the Claude Code hook runs at session end after setup.
Impact
Agent configuration and trajectory collection may occur, but no concrete malicious behavior or unconsented installation-time change was established.
Mechanism
The CLI resolves agent configuration directories and runs integration setup. The session hook passes session identifiers and the transcript path to `straion trajectory collect`.
AI rationale
Source shows explicit agent setup and session-end trajectory collection, with no npm lifecycle trigger or concrete malicious behavior established. The guarded agent configuration capability warrants a warning under the agent integration policy.
Evidence
dist/cli.jsdist/agent-integrations/plugins/claude-code/straion-plugin/hooks/session-end.js
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes `straion` as a CLI and has no install lifecycle hook, so agent setup is not triggered by npm installation.
- The CLI defines agent configuration paths, including the Claude Code plugin directory and the user-level OpenCode configuration paths.
- Agent setup is activated by the explicit `straion setup` command; agent IDs can be supplied or selected interactively.
- The Claude Code session-end hook invokes `straion trajectory collect` with the session ID and transcript path.
Evidence against
- The inspected source does not establish an unconsented install-time agent configuration change or a concrete malicious action.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggeddist/agent-integrations/plugins/claude-code/straion-plugin/hooks/session-end.jsView file
8L9: const { execFileSync } = require('child_process');
L10:
High
Child Process
Package source references child process execution.
dist/agent-integrations/plugins/claude-code/straion-plugin/hooks/session-end.jsView on unpkg · L8dist/cli.jsView file
552contains invisible/control Unicode U+200E (left-to-right mark)
`),i;function a(e){return r.stack.push(e),t;function t(){r.stack.pop()}}}function xz(e){throw Error("Cannot handle value `"+e+"`, expected node")}function Sz(e){throw Error("Cannot handle unknown node `"+e.type+"`")}function Cz(e,t){if(e.ty
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/cli.jsView on unpkg · L552Findings
3 Critical5 High3 Medium4 Low
CriticalTrojan Source Unicodedist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/agent-integrations/plugins/claude-code/straion-plugin/hooks/session-end.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
Affected versions and remediation
This report applies to @straion/cli@0.0.29.
See all versions of @straion/cli for other recorded verdicts.
- Review the evidence and your use of @straion/cli@0.0.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.