codiedev@0.9.76
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the Anthropic credential reference is confined to CI usage documentation. The reviewed runtime credential flows use a Codiedev token with the configured Codiedev backend or gateway.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs a CLI command or the codie harness.
Impact
Expected Codiedev service communication; no unrelated credential collection or automatic install-time behavior was found.
Mechanism
The doctor command validates the saved Codiedev token against its configured backend; codie uses a Codiedev key to request an approved model catalog.
AI rationale
The manifest has no install-time hook, and the Anthropic credential reference is confined to CI usage documentation. The reviewed runtime credential flows use a Codiedev token with the configured Codiedev backend or gateway.
Network endpoints2
cli.codiedev.comgateway.codiedev.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs TypeScript compilation; there is no install hook.
- The pack example describes Anthropic credentials as user-provided CI secrets for a Claude Code command, not as data sent by this package.
- The doctor command sends its saved Codiedev token to the configured backend for token validation.
- The codie command requires a Codiedev key and fetches its approved model catalog from the Codiedev gateway.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/piRuntime.jsView file
48const path = __importStar(require("path"));
L49: const child_process_1 = require("child_process");
L50: const codieRuntimeInstall_1 = require("./codieRuntimeInstall");
High
dist/utils.jsView file
2261// Anything a user added to this file by hand stays.
L2262: const preserved = existing.filter((hook) => !(0, detection_1.isCodiedevHookCommand)((hook.bash ?? hook.powershell ?? hook.command)));
L2263: const ours = managed
High
137Cross-file remote execution chain: dist/utils.js spawns dist/hook.js; helper contains network access plus dynamic code execution.
L137: const os = __importStar(require("os"));
L138: const child_process_1 = require("child_process");
L139: const detection_1 = require("./detection");
...
L159: const raw = fs.readFileSync(exports.CONFIG_PATH, "utf8");
L160: return JSON.parse(raw);
L161: }
...
L321: function normalizeRepoUrl(url) {
L322: // Normalize SSH (git@github.com:org/repo.git) and HTTPS (https://github.com/org/repo.git)
L323: // to a comparable form: github.com/org/repo
...
L909: const CODEX_DIR = (0, harnessDirs_1.codexHome)();
L910: const CURSOR_DIR = path.join(os.homedir(), ".cursor");
L911: const OPENCODE_DIR = (0, harnessDirs_1.openCodeConfigDir)();
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/piRuntime.js
HighShelldist/utils.js
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.76.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.76 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.