codiedev@0.9.73
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the reviewed network behavior is tied to user-initiated Codiedev connection, session capture, and harness use. The transcript upload is part of the package’s stated purpose and targets its configured Codiedev backend.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Session capture hooks are installed when the user runs connect; the harness runs when the user invokes codie.
Impact
Expected session sharing with the connected Codiedev service; no unrelated credential destination or concealed install-time activity was identified.
Mechanism
Capture hooks upload session data to the configured Codiedev backend. Codie sends its key to the Codiedev gateway for an approved model catalog.
AI rationale
The manifest has no install-time hook, and the reviewed network behavior is tied to user-initiated Codiedev connection, session capture, and harness use. The transcript upload is part of the package’s stated purpose and targets its configured Codiedev backend.
Network endpoints2
cli.codiedev.comgateway.codiedev.com
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs the TypeScript build; there is no install hook.
- The connect command installs session capture hooks for detected agent clients, matching the package’s stated session-capture purpose.
- Those hooks send transcripts to the configured Codiedev backend, and the capture payload explicitly includes the transcript.
- Codie sends its configured key to the Codiedev gateway to fetch the model catalog.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/piRuntime.jsView file
48const path = __importStar(require("path"));
L49: const child_process_1 = require("child_process");
L50: const codieRuntimeInstall_1 = require("./codieRuntimeInstall");
High
dist/utils.jsView file
2260// Anything a user added to this file by hand stays.
L2261: const preserved = existing.filter((hook) => !(0, detection_1.isCodiedevHookCommand)((hook.bash ?? hook.powershell ?? hook.command)));
L2262: const ours = managed
High
137Cross-file remote execution chain: dist/utils.js spawns dist/hook.js; helper contains network access plus dynamic code execution.
L137: const os = __importStar(require("os"));
L138: const child_process_1 = require("child_process");
L139: const detection_1 = require("./detection");
...
L159: const raw = fs.readFileSync(exports.CONFIG_PATH, "utf8");
L160: return JSON.parse(raw);
L161: }
...
L321: function normalizeRepoUrl(url) {
L322: // Normalize SSH (git@github.com:org/repo.git) and HTTPS (https://github.com/org/repo.git)
L323: // to a comparable form: github.com/org/repo
...
L909: const CODEX_DIR = (0, harnessDirs_1.codexHome)();
L910: const CURSOR_DIR = path.join(os.homedir(), ".cursor");
L911: const OPENCODE_DIR = (0, harnessDirs_1.openCodeConfigDir)();
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/piRuntime.js
HighShelldist/utils.js
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.73.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.73 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.