registry / @varveai/adit-cli / 1.0.15
@varveai/adit-cli@1.0.15
AI Development Intent Tracker — Transparent Time Machine for your codebase
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe postinstall hook automatically installs the package’s own AI-agent skills into user-level directories. The inspected behavior is limited to those skills and preserves customized copies, so this is a warning-level agent extension lifecycle risk rather than a broader settings hijack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm install runs the package’s postinstall hook.
Impact
The skills become available to AI-agent sessions without a separate user command; this is an automatic extension lifecycle risk.
Mechanism
The hook imports dist/install-skills.js, which calls the installer and writes skill files under the home directory’s .agents/skills and .claude/skills paths.
AI rationale
The postinstall hook automatically installs the package’s own AI-agent skills into user-level directories. The inspected behavior is limited to those skills and preserves customized copies, so this is a warning-level agent extension lifecycle risk rather than a broader settings hijack.
Evidence
package.jsoninstall-skill.cjsdist/install-skills.jsdist/commands/skills.js~/.agents/skills/<skill>/SKILL.md~/.agents/skills/<skill>/.adit-managed.json~/.claude/skills/<skill>/SKILL.md~/.claude/skills/<skill>/.adit-managed.json
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package’s postinstall hook runs install-skill.cjs, which imports and runs the skill installer automatically.
- The installer writes ADIT skills into the user’s ~/.agents/skills and ~/.claude/skills directories.
- Existing customized skills are skipped unless their contents match the installer’s recorded ADIT-managed hash.
Evidence against
- The install-time writes are limited to the package’s own skills; the inspected code does not change broader agent settings.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node install-skill.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/commands/self-update.jsView file
8*/
L9: import { execFileSync, execSync } from "node:child_process";
L10: import { existsSync, readFileSync, realpathSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/commands/self-update.jsView on unpkg · L8210console.log("Installing dependencies ...");
L211: execSync("pnpm install --frozen-lockfile", {
L212: ...showExecOpts,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/commands/self-update.jsFindings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/commands/cli-agent/claude/hooks-bootstrap.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/commands/self-update.js
HighShelldist/commands/cli-agent/cli-process.js
HighRuntime Package Installdist/commands/self-update.js
MediumDynamic Requiredist/version.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @varveai/adit-cli@1.0.15.
See all versions of @varveai/adit-cli for other recorded verdicts.
- Review the evidence and your use of @varveai/adit-cli@1.0.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.