registry / @varveai/adit-cli / 1.0.17
@varveai/adit-cli@1.0.17
AI Development Intent Tracker — Transparent Time Machine for your codebase
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package's postinstall automatically installs its own skills into user-level Claude and agents skill directories. This is an agent extension lifecycle risk; the reviewed install path does not show credential theft or unrelated network activity.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the postinstall lifecycle script.
Impact
Agent sessions may load ADIT skills after installation without a separate user command.
Mechanism
The lifecycle script imports install-skills.js, which calls installSkillsCommand and writes skills under the home directory's .agents/skills and .claude/skills directories.
AI rationale
The package's postinstall automatically installs its own skills into user-level Claude and agents skill directories. This is an agent extension lifecycle risk; the reviewed install path does not show credential theft or unrelated network activity.
Evidence
package.jsoninstall-skill.cjsdist/install-skills.jsdist/commands/skills.js~/.agents/skills/adit-tasks/SKILL.md~/.agents/skills/adit-history/SKILL.md~/.agents/skills/adit-reports/SKILL.md~/.agents/skills/adit-memory/SKILL.md~/.claude/skills/adit-tasks/SKILL.md~/.claude/skills/adit-history/SKILL.md~/.claude/skills/adit-reports/SKILL.md~/.claude/skills/adit-memory/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The postinstall script runs install-skill.cjs, which imports and invokes the skill installer automatically.
- The installer writes ADIT skills under the user's home directory in both .agents/skills and .claude/skills.
Evidence against
- The install-time write is limited to the package's own named skills; the installer checks for customized files before replacing them.
- The reviewed install path does not show credential collection or network contact.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.postinstall = node install-skill.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/commands/self-update.jsView file
8*/
L9: import { execFileSync, execSync } from "node:child_process";
L10: import { existsSync, readFileSync, realpathSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/commands/self-update.jsView on unpkg · L8210console.log("Installing dependencies ...");
L211: execSync("pnpm install --frozen-lockfile", {
L212: ...showExecOpts,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/commands/self-update.jsFindings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/commands/cli-agent/claude/hooks-bootstrap.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/commands/self-update.js
HighShelldist/commands/cli-agent/cli-process.js
HighRuntime Package Installdist/commands/self-update.js
MediumDynamic Requiredist/version.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @varveai/adit-cli@1.0.17.
See all versions of @varveai/adit-cli for other recorded verdicts.
- Review the evidence and your use of @varveai/adit-cli@1.0.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.