clavue-v1@1.38.0
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiInspected source supports ordinary CLI, provider, schema-compilation, and sandbox behavior. Runtime diagnostic uploads are package-aligned and configurable; no credential theft, unrequested account action, install-time mutation, or other concrete attack was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when invoked; diagnostic uploads occur on runtime errors or interruptions when reporting remains enabled.
Impact
No malicious impact was established. Runtime diagnostics can disclose error details and client information to the package’s service.
Mechanism
The router sends redacted diagnostic records and client details to Clavue’s service. Provider authentication uses configured provider requests, while the inspected proxy applies a connection filter.
AI rationale
Inspected source supports ordinary CLI, provider, schema-compilation, and sandbox behavior. Runtime diagnostic uploads are package-aligned and configurable; no credential theft, unrequested account action, install-time mutation, or other concrete attack was identified.
Network endpoints2
api.clavue.com/v1/public/incidentsapi.anthropic.com
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes dist/cli.js as the command-line entry point and lists build and development scripts; no registry install hook or runtime self-dependency was found.
- Incident reports are created from runtime errors or interruptions, redact common credential patterns, and are sent to the package’s own Clavue endpoint when reporting is enabled. Settings and environment variables can disable uploads.
- Provider authentication code builds API-key or bearer headers for configured provider requests, and the adapter includes the Anthropic service preset.
- The MAO command handler dispatches caller-supplied subcommands; its command runner is part of that explicit command functionality.
- Ajv’s flagged dynamic function creation compiles generated serializer code from a schema.
- The sandbox HTTP proxy checks each requested connection with a filter and blocks requests the filter rejects.
Evidence against
- The router uploads diagnostic records by default unless settings or environment variables disable reporting; this is disclosed as diagnostics and uses a package-aligned endpoint.
- The flagged dynamic evaluation and shell-capable command execution have source contexts consistent with schema compilation and explicit CLI operations.
Source & flagged code
12 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L415${formatCommandFailure(result)}
L16: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L17: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
High
node_modules/ajv/dist/compile/jtd/serialize.jsView file
Findings
1 Critical7 High7 Medium5 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighEvalnode_modules/ajv/dist/compile/jtd/serialize.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighSemantic Analysis Limitednode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
MediumShips Build Helper
Affected versions and remediation
This report applies to clavue-v1@1.38.0.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.38.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.