clavue-v1@1.12.0
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected source supports ordinary provider authentication and sandbox functionality; the scanner's credential, shell, and network matches do not establish an attack. No evidence showed an install hook, unrelated credential recipient, or malicious command behavior in the reviewed paths.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the command-line application or invokes its provider and sandbox features.
Impact
No confirmed attack effect was established from the inspected source.
Mechanism
The provider code builds service authentication headers, while the sandbox CLI starts commands and its proxy handles HTTPS connections.
AI rationale
The inspected source supports ordinary provider authentication and sandbox functionality; the scanner's credential, shell, and network matches do not establish an attack. No evidence showed an install hook, unrelated credential recipient, or malicious command behavior in the reviewed paths.
Decision evidence
public snapshotAI called this Clean at 77.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest exposes a command-line entry point and lists build and check scripts.
- The provider router recognizes Clavue's official cloud hosts.
- The adapter obtains authentication for Claude subscriber or API-key requests.
- The Mao command is a bundled runtime module.
- The sandbox CLI uses Commander and SandboxManager to run commands.
- The sandbox proxy creates a server to handle HTTPS connections.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
12 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L4node_modules/@anthropic-ai/sandbox-runtime/dist/cli.jsView file
44.option('-s, --settings <path>', 'path to config file (default: ~/.srt-settings.json)')
L45: .option('-c <command>', 'run command string directly (like sh -c), no escaping applied')
L46: .option('--control-fd <fd>', 'read config updates from file descriptor (JSON lines protocol)', parseInt)
High
Shell
Package source references shell execution.
node_modules/@anthropic-ai/sandbox-runtime/dist/cli.jsView on unpkg · L44Findings
1 Critical6 High8 Medium5 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShellnode_modules/@anthropic-ai/sandbox-runtime/dist/cli.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighSemantic Analysis Limitednode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js#virtual:normalized:round1
MediumDynamic Requirenode_modules/@opentelemetry/api/build/src/metrics/NoopMeterProvider.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
Affected versions and remediation
This report applies to clavue-v1@1.12.0.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.