clavue-v1@1.46.4
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiSource inspection found package-aligned diagnostic reporting with disable controls, plus ordinary CLI subprocess, serializer code-generation, and sandbox proxy behavior. No concrete attack behavior was established.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
An error is recorded during CLI runtime.
Impact
The source supports package-aligned error diagnostics; it does not establish credential theft or an unrelated recipient.
Mechanism
The reporter redacts common credential formats and posts diagnostic records to the Clavue incidents endpoint unless settings or environment controls disable reporting.
AI rationale
Source inspection found package-aligned diagnostic reporting with disable controls, plus ordinary CLI subprocess, serializer code-generation, and sandbox proxy behavior. No concrete attack behavior was established.
Evidence
package.jsondist/provider-router.jsdist/mao-command.jsnode_modules/ajv/dist/compile/jtd/serialize.jsnode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js
Network endpoints1
api.clavue.com/v1/public/incidents
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies a CLI entrypoint and lists build and check scripts; the inspected manifest has no install lifecycle hook.
- The runtime records error details after redacting common credential formats, and its reporting gate honors settings and environment opt-outs.
- When reporting is enabled, the runtime posts diagnostic records to the Clavue incidents endpoint.
- The Mao command helper runs a supplied command and argument list as part of the CLI runtime.
- Ajv generates serializer functions from generated schema code.
- The sandbox HTTP proxy checks each target through a configured filter and blocks denied connections.
Evidence against
- The inspected source shows no install-time activation or transfer of saved service credentials to an unrelated recipient.
- The incident reporter uses a package-aligned endpoint and has settings and environment controls to disable cloud reporting.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystem
Source & flagged code
12 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L415${formatCommandFailure(result)}
L16: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L17: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
High
node_modules/ajv/dist/compile/jtd/serialize.jsView file
Findings
1 Critical7 High7 Medium5 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighEvalnode_modules/ajv/dist/compile/jtd/serialize.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighSemantic Analysis Limitednode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
MediumShips Build Helper
Affected versions and remediation
This report applies to clavue-v1@1.46.4.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.46.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.