registry / @varveai/adit-cli / 1.0.13
@varveai/adit-cli@1.0.13
AI Development Intent Tracker — Transparent Time Machine for your codebase
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe postinstall hook automatically writes ADIT's own task skill into global agent skill directories. This matches the warning-only agent extension lifecycle risk; the inspected code does not show install-time data transmission or broader agent-setting changes.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation via the postinstall lifecycle script.
Impact
Changes AI-agent configuration outside the package without an explicit user command; the skill becomes available to those agents.
Mechanism
The hook imports the task-skill installer, which creates or updates `adit-tasks/SKILL.md` and managed metadata under the user's `.agents` and `.claude` skill directories.
AI rationale
The postinstall hook automatically writes ADIT's own task skill into global agent skill directories. This matches the warning-only agent extension lifecycle risk; the inspected code does not show install-time data transmission or broader agent-setting changes.
Evidence
package.jsoninstall-skill.cjsdist/install-task-skill.jsdist/commands/task-skill.js~/.agents/skills/adit-tasks/SKILL.md~/.agents/skills/adit-tasks/.adit-managed.json~/.claude/skills/adit-tasks/SKILL.md~/.claude/skills/adit-tasks/.adit-managed.json
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package runs `node install-skill.cjs` during postinstall, which imports and calls the task-skill installer.
- The installer targets `~/.agents/skills/adit-tasks` and `~/.claude/skills/adit-tasks`, creating skill files outside the package during installation.
Evidence against
- The installed skill is specific to ADIT task integration and instructs agents to use the existing ADIT Cloud login.
- The installer skips symbolic links and preserves existing or customized skill files it does not manage.
- I found no evidence that this install-time setup sends data over the network.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node install-skill.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/commands/self-update.jsView file
8*/
L9: import { execFileSync, execSync } from "node:child_process";
L10: import { existsSync, readFileSync, realpathSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/commands/self-update.jsView on unpkg · L8210console.log("Installing dependencies ...");
L211: execSync("pnpm install --frozen-lockfile", {
L212: ...showExecOpts,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/commands/self-update.jsFindings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/commands/cli-agent/claude/hooks-bootstrap.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/commands/self-update.js
HighShelldist/commands/cli-agent/cli-process.js
HighRuntime Package Installdist/commands/self-update.js
MediumDynamic Requiredist/version.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @varveai/adit-cli@1.0.13.
See all versions of @varveai/adit-cli for other recorded verdicts.
- Review the evidence and your use of @varveai/adit-cli@1.0.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.