clavue-v1@1.48.5
Clavue v1: lightweight four-slot (main/light/plan/review) multi-model coding CLI on the execution-first engine — overlapped cross-family review, official Clavue cloud preset (api.clavue.com) alongside any Messages-compatible provider, learned context ceil
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged network behavior is package-aligned runtime diagnostics with redaction and disable controls, while the flagged subprocess behavior supports scoped Mao tasks. The inspected source does not establish a concrete attack surface.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A runtime incident is recorded while the CLI is in use.
Impact
Diagnostics may disclose error context to Clavue, but the inspected paths do not establish credential theft or unrelated account actions.
Mechanism
The provider bundle builds a diagnostic record and may POST it to the incident endpoint; Mao subprocess commands are built for explicit task operations with scoped access.
AI rationale
The flagged network behavior is package-aligned runtime diagnostics with redaction and disable controls, while the flagged subprocess behavior supports scoped Mao tasks. The inspected source does not establish a concrete attack surface.
Evidence
package.jsondist/provider-router.jsdist/mao-command.js
Network endpoints1
api.clavue.com/v1/public/incidents
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest publishes `dist/cli.js` as the command-line entry point.
- The provider bundle redacts common bearer-token and API-key patterns in diagnostic text.
- Incident reports are sent as JSON and can be disabled through settings or environment flags.
- The default incident endpoint is Clavue's own API.
- Mao task commands use explicit prompts and read-only or workspace-write scope; its helper runs commands with the selected working directory.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
11 flagged · loading sourcedist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,"utf8"),process4.platform!=="win32")try{fs.chmodSync(filePath,384)}catch{}}__name(defaultWriteJsonFile,"defaultWriteJsonFile");function defaultSafeReadFile(filePath){try{return f...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L415${formatCommandFailure(result)}
L16: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L17: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
High
•matchType = normalized_sha256
matchedPackage = iclavue@11.3.5
matchedPath = dist/mao-command.js
matchedIdentity = npm:aWNsYXZ1ZQ:11.3.5
similarity = 1.000
summary = normalized source hash matched finalized malicious source
Findings
1 Critical6 High7 Medium6 Low
CriticalCredential Exfiltrationdist/provider-router.js
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighSame File Env Network Executiondist/provider-router.js
HighCommand Output Exfiltrationdist/provider-router.js
HighCloud Metadata Accessdist/provider-router.js
HighKnown Malware Source Similaritydist/mao-command.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/ripgrep/x64-darwin/rg
MediumShips Build Helperinstall.sh
MediumOversized Source Filedist/cli.js
Medium
Affected versions and remediation
This report applies to clavue-v1@1.48.5.
See all versions of clavue-v1 for other recorded verdicts.
- Review the evidence and your use of clavue-v1@1.48.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.