codiedev@0.9.79
Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe reviewed credential flows use the configured Codiedev gateway or backend, and no install-time code runs for registry installs. The automatic hook self-update is a package maintenance behavior with opt-outs and no evidence of unrelated code or data transfer.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI use, configured agent hooks, or a harness launch.
Impact
No source evidence showed credentials sent to an unrelated host or unrequested account actions.
Mechanism
The harness uses a Codiedev token with its configured gateway; doctor validates a token with its configured backend. Hooks may spawn a rate-limited self-update process.
AI rationale
The reviewed credential flows use the configured Codiedev gateway or backend, and no install-time code runs for registry installs. The automatic hook self-update is a package maintenance behavior with opt-outs and no evidence of unrelated code or data transfer.
Network endpoints2
gateway.codiedev.com/api/v1config.backendUrl
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs the TypeScript build; there is no install hook.
- The harness requires a Codiedev key and sends it to the configured Codiedev gateway for its approved model catalog.
- The doctor command sends the configured Codiedev token to the configured backend's validateToken endpoint.
- The hook can start a once-daily background self-update, with environment-variable opt-outs; this supports the package's CLI update behavior.
Evidence against
- The harness passes repository URL, branch, and commit information to its child process environment.
- Hook-triggered self-update runs without a separate prompt, although it is rate-limited and can be disabled.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/piRuntime.jsView file
48const path = __importStar(require("path"));
L49: const child_process_1 = require("child_process");
L50: const codieRuntimeInstall_1 = require("./codieRuntimeInstall");
High
dist/selfUpdate.jsView file
298* The .ps1 shims missing from a Windows npm prefix. The IT kit deletes them so
L299: * PowerShell falls back to the .cmd shims, which run under the Restricted
L300: * execution policy Windows client machines default to; `npm i -g` puts them
High
dist/codie.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = codiedev@0.9.24
matchedIdentity = npm:Y29kaWVkZXY:0.9.24
similarity = 0.421
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/codie.js
HighChild Processdist/piRuntime.js
HighShelldist/selfUpdate.js
HighSandbox Evasion Gated Capabilitydist/codie.js
HighCross File Remote Execution Contextdist/utils.js
HighSemantic Analysis Limitedassets/git-refs.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to codiedev@0.9.79.
See all versions of codiedev for other recorded verdicts.
- Review the evidence and your use of codiedev@0.9.79 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.