registry / codeassembly / 0.16.0
codeassembly@0.16.0
CLI that installs reusable AI agent guidance (rulebooks, skills, and subagents) into coding-harness directories
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged process execution and added relay file support the package’s stated CLI and lifecycle-logging purpose. The reviewed flow filters event data and writes it locally; no malicious action or external data transfer was identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs the CLI install command and later a configured harness lifecycle hook fires.
Impact
Local event logging under the user’s home directory; no external transmission was identified.
Mechanism
The relay filters the hook payload, adds repository, branch, session, and working-directory context, then appends an event to a JSONL file.
AI rationale
The flagged process execution and added relay file support the package’s stated CLI and lifecycle-logging purpose. The reviewed flow filters event data and writes it locally; no malicious action or external data transfer was identified.
Evidence
~/.codeassembly/events/<repo>/<branch>/<session>.jsonlharness configuration files
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI, and its wrapper loads the CLI entry point when invoked.
- The installer wires lifecycle hooks during an explicit install command; hook wiring can be disabled with an option.
- The relay filters hook input to selected fields and records event data in a local file under the user’s home directory.
- The relay does not send event data to a network endpoint in the reviewed flow.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flaggeddist/esm/derive-session-context/cli.jsView file
1import { execFile } from 'node:child_process';
L2: import { realpathSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/esm/derive-session-context/cli.jsView on unpkg · L1bin/codeassembly.jsView file
20try {
L21: await import(entryPoint.href);
L22: } catch (error) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/codeassembly.jsView on unpkg · L20dist/esm/kb-curate/apply/canonicalize-tags.jsView file
Findings
1 Critical2 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/content/scripts/relay-hook-event.mjs
HighChild Processdist/esm/derive-session-context/cli.js
HighCross File Remote Execution Contextdist/esm/kb-curate/apply/canonicalize-tags.js
MediumDynamic Requirebin/codeassembly.js
MediumEnvironment Vars
MediumShips Build Helperdist/content/scripts/resolve-reviewer-context.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codeassembly@0.16.0.
See all versions of codeassembly for other recorded verdicts.
- Review the evidence and your use of codeassembly@0.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.