claude-code-templates@1.32.1
Component templates and tracking system for Claude Code
AI Security Review
scanned 21h ago · by lpm-firewall-aiThe CLI sends default-on runtime analytics to its own service that includes a path derived from the selected install directory. This is identifying telemetry, so the package warrants a warning; the configuration writes and error reporting reviewed are tied to explicit use or opt-in.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user installs a component through the CLI while tracking is enabled by default.
Impact
The package service receives a project-relative filesystem path alongside component usage data, which is identifying runtime telemetry under the review rules.
Mechanism
The installer passes the target directory relative to the current working directory in event metadata, and the tracking service includes a derived path in a POST payload.
AI rationale
The CLI sends default-on runtime analytics to its own service that includes a path derived from the selected install directory. This is identifying telemetry, so the package warrants a warning; the configuration writes and error reporting reviewed are tied to explicit use or opt-in.
Evidence
cli-tool/src/tracking-service.jscli-tool/src/index.js<targetDir>/.claude/agents/<filename>.md
Network endpoints1
www.aitmpl.com/api/track-download-supabase
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime tracking is enabled by default unless opt-out or CI flags disable it.
- A component download payload includes a `path` field derived from tracking metadata.
- An agent installation supplies the target directory relative to the current working directory as tracking metadata.
- The tracking service POSTs download events to `https://www.aitmpl.com/api/track-download-supabase`.
Evidence against
- Component installation and its resulting configuration writes require an explicit command or catalog selection.
- Crash reports are gated by `CCT_ERROR_REPORTING=true` and respect the tracking opt-out flags.
- The added external-skill downloader fetches pinned commits and verifies downloaded files against Git blob hashes.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
5 flaggedcli-tool/bin/create-claude-config.jsView file
2L3: const { program, Option } = require('commander');
L4: const chalk = require('chalk');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
cli-tool/bin/create-claude-config.jsView on unpkg · L2cli-tool/src/external-skill.jsView file
22L23: const CATALOG_SKILLS_RAW = 'https://raw.githubusercontent.com/davila7/claude-code-templates/main/cli-tool/components/skills';
L24: const MAX_FILES = 200;
...
L103: try {
L104: parsed = JSON.parse(await response.text());
L105: } catch {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
cli-tool/src/external-skill.jsView on unpkg · L22cli-tool/src/index.jsView file
Findings
3 High4 Medium6 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationcli-tool/src/index.js
HighSemantic Analysis Limitedcli-tool/src/install-ui.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltacli-tool/src/index.js
MediumDynamic Requirecli-tool/bin/create-claude-config.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptocli-tool/src/external-skill.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to claude-code-templates@1.32.1.
See all versions of claude-code-templates for other recorded verdicts.
- Review the evidence and your use of claude-code-templates@1.32.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.