registry / @varveai/adit-cli / 1.0.8
@varveai/adit-cli@1.0.8
AI Development Intent Tracker — Transparent Time Machine for your codebase
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged code installs temporary Claude hooks during the cloud Claude workflow, and its status-line request targets a loopback server created for that session. The manifest declares no install-time hook, and the temporary settings are cleaned up on shutdown.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
An explicit cloud Claude session started by the user.
Impact
The metadata supports the requested cloud agent session; no unrelated collection or execution was identified.
Mechanism
The status-line script posts model and session metadata to the hook server bound to loopback; the temporary settings are removed during cleanup.
AI rationale
The flagged code installs temporary Claude hooks during the cloud Claude workflow, and its status-line request targets a loopback server created for that session. The manifest declares no install-time hook, and the temporary settings are cleaned up on shutdown.
Evidence
<project>/.claude/adit-cloud-<terminalId>.settings.local.json
Network endpoints1
127.0.0.1:<ephemeral-port>/hook
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install or lifecycle hook; its scripts are build and typecheck only.
- The Claude hook setup is part of the cloud Claude command and uses the local hook server’s endpoint.
- The hook server binds to 127.0.0.1 on an ephemeral port.
- The status-line POST contains model, effort, session, transcript path, and working directory metadata; the endpoint is provided by that local server.
- The temporary hook configuration is cleaned up when the cloud Claude session stops.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/commands/self-update.jsView file
8*/
L9: import { execSync } from "node:child_process";
L10: import { existsSync, readFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/commands/self-update.jsView on unpkg · L8196console.log("Installing dependencies ...");
L197: execSync("pnpm install --frozen-lockfile", {
L198: ...showExecOpts,
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/commands/self-update.jsView on unpkg · L196dist/commands/cli-agent/cli-process.jsView file
80* Terminate a spawned CLI, including its descendants on Windows. `.cmd`/`.bat`
L81: * shims run under a cmd.exe shell, so killing only the direct child leaves the
L82: * real CLI (e.g. claude.exe) alive and still reading the console — which is
Findings
1 Critical7 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/commands/cli-agent/claude/hooks-bootstrap.js
HighChild Processdist/commands/self-update.js
HighShelldist/commands/cli-agent/cli-process.js
HighSame File Env Network Executiondist/commands/cli-agent/claude/hooks-bootstrap.js
HighCommand Output Exfiltrationdist/commands/cli-agent/claude/hooks-bootstrap.js
HighTrigger Reachable Command Output Exfiltrationdist/commands/cli-agent/claude/hooks-bootstrap.js
HighRuntime Package Installdist/commands/self-update.js
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @varveai/adit-cli@1.0.8.
See all versions of @varveai/adit-cli for other recorded verdicts.
- Review the evidence and your use of @varveai/adit-cli@1.0.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.