registry / @varveai/adit-cli / 1.0.16
@varveai/adit-cli@1.0.16
AI Development Intent Tracker — Transparent Time Machine for your codebase
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe postinstall hook automatically installs the package's own AI-agent skills into user-level agent directories. The behavior is limited and protects customized files, but automatic agent-extension setup is a warning-level lifecycle risk.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm package installation, through the postinstall hook.
Impact
AI agents may load these skills after installation without the user explicitly running a setup command.
Mechanism
The hook imports and runs the skill installer, which creates ADIT skill files under `.agents/skills` and `.claude/skills` in the user's home directory.
AI rationale
The postinstall hook automatically installs the package's own AI-agent skills into user-level agent directories. The behavior is limited and protects customized files, but automatic agent-extension setup is a warning-level lifecycle risk.
Evidence
package.jsoninstall-skill.cjsdist/install-skills.jsdist/commands/skills.js~/.agents/skills/<ADIT skill>/SKILL.md~/.claude/skills/<ADIT skill>/SKILL.md~/.agents/skills/<ADIT skill>/.adit-managed.json~/.claude/skills/<ADIT skill>/.adit-managed.json
Decision evidence
public snapshotAI called this Suspicious at 95.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package runs `node install-skill.cjs` from its postinstall hook.
- The postinstall entry imports and runs the skill installer automatically.
- The installer targets the user's `.agents/skills` and `.claude/skills` directories and writes ADIT skill files there.
- The installer skips existing customized skills and only updates files marked as ADIT-managed.
Evidence against
- The automatic writes are limited to ADIT skills; no broader agent settings are changed in the inspected path.
- The installer protects existing customized skill files.
- No install-time network request or credential collection was identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node install-skill.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/commands/self-update.jsView file
8*/
L9: import { execFileSync, execSync } from "node:child_process";
L10: import { existsSync, readFileSync, realpathSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/commands/self-update.jsView on unpkg · L8210console.log("Installing dependencies ...");
L211: execSync("pnpm install --frozen-lockfile", {
L212: ...showExecOpts,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/commands/self-update.jsFindings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/commands/cli-agent/claude/hooks-bootstrap.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/commands/self-update.js
HighShelldist/commands/cli-agent/cli-process.js
HighRuntime Package Installdist/commands/self-update.js
MediumDynamic Requiredist/version.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @varveai/adit-cli@1.0.16.
See all versions of @varveai/adit-cli for other recorded verdicts.
- Review the evidence and your use of @varveai/adit-cli@1.0.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.