registry / @varveai/adit-cli / 1.1.0
@varveai/adit-cli@1.1.0
AI Development Intent Tracker — Transparent Time Machine for your codebase
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe postinstall hook automatically writes ADIT skills into user-level agent skill directories and starts the local service. The setup is limited to this package's own integration, so this merits a warning rather than a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A normal package installation outside CI and root contexts.
Impact
Agent sessions may load ADIT skills without the user explicitly running setup; the background service also starts during installation.
Mechanism
The postinstall script runs the setup entry, which writes bundled skill files under the user's .agents/skills and .claude/skills directories, then starts the daemon.
AI rationale
The postinstall hook automatically writes ADIT skills into user-level agent skill directories and starts the local service. The setup is limited to this package's own integration, so this merits a warning rather than a malicious verdict.
Evidence
package.jsoninstall-skill.cjsdist/installation.jsdist/commands/skills.js.agents/skills/<skill>/SKILL.md.claude/skills/<skill>/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The postinstall script launches the package setup program during ordinary installs.
- Setup installs bundled ADIT skills under the user's .agents/skills and .claude/skills directories.
- The same setup starts or restarts a background service.
Evidence against
- The installed skills are part of ADIT's agent integration, and customized skill copies are preserved.
- The service is part of the package's stated local tracking purpose and binds to 127.0.0.1.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-skill.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/local/attribution-analysis.jsView file
1import { createHash, randomUUID } from "node:crypto";
L2: import { execFile } from "node:child_process";
L3: import { promisify } from "node:util";
High
Child Process
Package source references child process execution.
dist/local/attribution-analysis.jsView on unpkg · L1dist/commands/cli-agent/cli-process.jsView file
80
Findings
1 Critical7 High4 Medium5 Low
CriticalAi Agent Control Hijackdist/main.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/local/attribution-analysis.js
HighShelldist/commands/cli-agent/cli-process.js
HighCommand Output Exfiltrationdist/commands/pr.js
HighTrigger Reachable Command Output Exfiltrationdist/commands/pr.js
HighRuntime Package Installdist/commands/self-update.js
HighSemantic Analysis Limiteddist/local/attribution-evidence.js#virtual:normalized:round1
MediumDynamic Requiredist/version.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @varveai/adit-cli@1.1.0.
See all versions of @varveai/adit-cli for other recorded verdicts.
- Review the evidence and your use of @varveai/adit-cli@1.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.