codiedev@0.9.72
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the added pi runtime is installed only when explicitly requested. The inspected token flows go to the configured Codiedev service; the foreign-host credential pointer is documentation context, not an observed secret transfer.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Users invoke CLI commands; the pinned pi runtime is installed only when `codie --pi` is requested.
Impact
No unauthorized credential transfer, install-time collection, or unrelated automatic action was found.
Mechanism
The harness uses a Codiedev account key with Codiedev services and lazily installs its pinned runtime.
AI rationale
The manifest has no install-time hook, and the added pi runtime is installed only when explicitly requested. The inspected token flows go to the configured Codiedev service; the foreign-host credential pointer is documentation context, not an observed secret transfer.
Network endpoints2
gateway.codiedev.comcli.codiedev.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes CLI binaries and has only a prepublishOnly compile script; it declares no install-time hook.
- The Codie harness requires a Codiedev gateway key and defaults to Codiedev’s gateway.
- The new pi runtime is selected only by the explicit `codie --pi` argument.
- The doctor command sends its configured token to the configured backend’s validateToken endpoint.
Evidence against
- The pi runtime installs a pinned npm package on first use, as part of the explicitly invoked harness.
- The pack CLI’s default backend host is cli.codiedev.com; the Anthropic-key pointer is in CI usage examples, not an observed credential transport.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/piRuntime.jsView file
48const path = __importStar(require("path"));
L49: const child_process_1 = require("child_process");
L50: const codieRuntimeInstall_1 = require("./codieRuntimeInstall");
High
dist/utils.jsView file
2259// Anything a user added to this file by hand stays.
L2260: const preserved = existing.filter((hook) => !(0, detection_1.isCodiedevHookCommand)((hook.bash ?? hook.powershell ?? hook.command)));
L2261: const ours = managed
High
137Cross-file remote execution chain: dist/utils.js spawns dist/hook.js; helper contains network access plus dynamic code execution.
L137: const os = __importStar(require("os"));
L138: const child_process_1 = require("child_process");
L139: const detection_1 = require("./detection");
...
L159: const raw = fs.readFileSync(exports.CONFIG_PATH, "utf8");
L160: return JSON.parse(raw);
L161: }
...
L321: function normalizeRepoUrl(url) {
L322: // Normalize SSH (git@github.com:org/repo.git) and HTTPS (https://github.com/org/repo.git)
L323: // to a comparable form: github.com/org/repo
...
L909: const CODEX_DIR = (0, harnessDirs_1.codexHome)();
L910: const CURSOR_DIR = path.join(os.homedir(), ".cursor");
L911: const OPENCODE_DIR = (0, harnessDirs_1.openCodeConfigDir)();
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/piRuntime.js
HighShelldist/utils.js
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.72.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.72 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.