@trailhq/trail-code@0.22.0
Your team's shared memory for coding agents: a code map on your machine, and the learnings, decisions and skills your whole team shares. Formerly graft.
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe postinstall telemetry is limited to installation metrics and gated by CI, DO_NOT_TRACK, and the saved telemetry setting. Agent configuration is tied to the CLI initialization flow, and inspected source establishes no concrete malicious behavior.
Decision evidence
public snapshot- package.json runs scripts/postinstall.mjs after installation; the script records an install event and starts a detached telemetry flush when its local telemetry entrypoints exist.
- The install event accepts only a global-install flag plus common telemetry fields and a random install identifier. The send path uses events.nanonets.com and checks telemetry gates, including DO_NOT_TRACK, CI, and the saved disabled setting.
- The agent-related paths support repo-local context and learning files. Claude configuration writes occur through trail init; later refreshes replay the flags saved at initialization.
- The pull-request checkout uses git with hooks disabled and bounded execution; the inspected path fetches and checks out repository refs.
- The postinstall hook queues default-on installation telemetry and launches a detached process that may send it.
- The CLI can write Claude settings, shims, skills, and MCP configuration, and later refresh those files after an upgrade.
Source & flagged code
5 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgpackage.json runs scripts/postinstall.mjs after installation; the script records an install event and starts a detached telemetry flush when its local telemetry entrypoints exist.
package.jsonView on unpkg · L47Findings
Affected versions and remediation
This report applies to @trailhq/trail-code@0.22.0.
See all versions of @trailhq/trail-code for other recorded verdicts.
- Review the evidence and your use of @trailhq/trail-code@0.22.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.