ai-review-agent@1.12.0

⚠ Under review

Local AI code review swarm — 15 observe-only default agents powered by Ollama, zero API costs (testgen opt-in)

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 10 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 48 file(s), 269 KB of source, external domains: 127.0.0.1, github.com, json.schemastore.org

Source & flagged code

3 flagged

package.jsonView file

Lines 20-60json

20 },

21 "bugs": {

22 "url": "https://github.com/unyieldingclaw-dev/ai-code-review-agent/issues"

23 },

24 "engines": {

25 "node": ">=18"

26 },

27 "files": [

28 "dist/",

29 ".claude/commands/",

30 "scripts/postinstall.mjs",

31 "README.md",

32 "LICENSE"

33 ],

34 "bin": {

35 "ai-review-agent": "./dist/cli/index.js",

36 "ai-review-mcp": "./dist/mcp/server.js"

37 },

38 "scripts": {

39 "build": "tsc",

40 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 "dev": "tsx src/cli/index.ts",

42 "test": "vitest run tests/unit",

43 "test:watch": "vitest tests/unit",

44 "test:integration": "vitest run tests/integration",

45 "test:coverage": "vitest run --coverage tests/unit",

46 "calibrate": "tsx calibration/calibrate.ts",

47 "calibrate:evidence": "tsx calibration/evidenceVerifierCalibration.ts",

48 "diagnose:truncation": "tsx calibration/responseTruncationDiagnostic.ts",

49 "typecheck": "tsc --noEmit",

50 "lint": "tsc --noEmit",

51 "test:extension": "npm --prefix vscode-extension test",

52 "format": "prettier --write .",

53 "format:check": "prettier --check .",

54 "lint:eslint": "eslint src/ tests/",

55 "check": "npm test && npm run typecheck && npm run build && npm run format:check && npm run lint:eslint"

56 },

57 "dependencies": {

58 "@modelcontextprotocol/sdk": "^1.29.0",

59 "commander": "^12.0.0",

60 "update-notifier": "^7.3.1"

scripts/postinstall.mjsView file

Lines 1-25javascript

1#!/usr/bin/env node

2// Plain JS, not compiled TypeScript: `postinstall` can fire before `npm run build` has ever

3// produced dist/ (e.g. a contributor's first `npm install` right after cloning). A dist/-based

4// entrypoint would make npm install itself fail in that window -- this file must always exist

5// and always be runnable with zero build step.

6import { existsSync, mkdirSync, copyFileSync } from 'fs'

7import { fileURLToPath } from 'url'

Source & flagged code

3 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.mjsView file

5// and always be runnable with zero build step. L6: import { existsSync, mkdirSync, copyFileSync } from 'fs' L7: import { fileURLToPath } from 'url' ... L31: try { L32: const source = join(__dirname, '..', '.claude', 'commands', 'ai-review.md') L33: if (!existsSync(source)) { ... L38: } L39: const destDir = join(resolveEffectiveHomeDir(), '.claude', 'commands') L40: mkdirSync(destDir, { recursive: true }) L41: copyFileSync(source, join(destDir, 'ai-review.md')) L42: } catch (err) {

Critical

Findings

1 Critical1 High4 Medium4 Low

CriticalAi Agent Control Hijackscripts/postinstall.mjs

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to ai-review-agent@1.12.0.

See all versions of ai-review-agent for other recorded verdicts.

Review the evidence and your use of ai-review-agent@1.12.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-20 00:16:11.708Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.