clavue-v1@1.43.1
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or concrete credential theft. The flagged evaluation, process execution, and network behavior are consistent with CLI, dependency, proxy, and package-aligned diagnostics functions.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the CLI; diagnostic reporting is triggered when an incident is recorded and its settings or environment gate permits reporting.
Impact
No confirmed attack impact; diagnostic metadata and incident details may be reported to the package service when reporting is enabled.
Mechanism
The reporter redacts common credential patterns and posts incident records to the Clavue incident endpoint. The proxy checks a connection filter before allowing traffic.
AI rationale
Source inspection found no install lifecycle hook or concrete credential theft. The flagged evaluation, process execution, and network behavior are consistent with CLI, dependency, proxy, and package-aligned diagnostics functions.
Network endpoints1
api.clavue.com/v1/public/incidents
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a command-line entry point and lists build and validation scripts, with no install lifecycle hook.
- The incident reporter redacts common secret patterns, sends reports only when enabled by its settings or environment gate, and posts to the Clavue incident service by default.
- The reporter sends incident records containing diagnostic details and client metadata; this is package-aligned reporting, not evidence of credential theft.
- The flagged dynamic evaluation in Ajv generates a serializer from schema code, and the sandbox proxy checks its filter before allowing a connection.
- The flagged process execution in mao-command.js invokes a command with supplied arguments and options as part of the CLI runtime.
Evidence against
- No inspected source establishes an install-time attack, credential harvesting, or an unconsented transfer to an unrelated recipient.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
12 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L415${formatCommandFailure(result)}
L16: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L17: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
High
node_modules/ajv/dist/compile/jtd/serialize.jsView file
Findings
1 Critical7 High7 Medium5 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighEvalnode_modules/ajv/dist/compile/jtd/serialize.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighSemantic Analysis Limitednode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
MediumShips Build Helper
Affected versions and remediation
This report applies to clavue-v1@1.43.1.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.43.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.