clavue-v1@1.45.5
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiSource inspection found no install-time attack or credential transfer to an unrelated recipient. Scanner matches resolve to normal CLI, schema-generation, proxy, and package-aligned diagnostics behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Using the CLI can trigger provider requests and error or interrupt reporting.
Impact
No confirmed attacker impact; diagnostic reports may include client details and error information.
Mechanism
Diagnostics send client and error details to Clavue’s incident service unless reporting is disabled; common credential patterns are redacted. Provider credentials are used for provider authentication.
AI rationale
Source inspection found no install-time attack or credential transfer to an unrelated recipient. Scanner matches resolve to normal CLI, schema-generation, proxy, and package-aligned diagnostics behavior.
Evidence
dist/provider-router.jsdist/mao-command.jsnode_modules/ajv/dist/compile/jtd/serialize.jsnode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js
Network endpoints2
api.clavue.com/v1/public/incidentsapi.anthropic.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entry point and lists development scripts; it has no install lifecycle hook.
- The flagged command runner passes an explicit command and arguments to a child process. Ajv generates serializers from schema code, and the sandbox proxy reconstructs requests after checking the host.
- Provider authentication uses an Anthropic token for provider requests, and the configured Messages API preset points to api.anthropic.com.
- Runtime diagnostics report errors and interrupts to Clavue’s incident service by default, with settings and environment opt-outs. The report includes client and error details, and the code redacts common credential formats; this is package-aligned diagnostics, not evidence of credential forwarding.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
12 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L415${formatCommandFailure(result)}
L16: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L17: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
High
node_modules/ajv/dist/compile/jtd/serialize.jsView file
Findings
1 Critical7 High7 Medium5 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighEvalnode_modules/ajv/dist/compile/jtd/serialize.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighSemantic Analysis Limitednode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
MediumShips Build Helper
Affected versions and remediation
This report applies to clavue-v1@1.45.5.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.45.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.