registry / coolhand-cli / 0.7.0

coolhand-cli@0.7.0

CLI for authenticating with Coolhand and retrieving API tokens from a local dev environment

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Explicit user commands can proxy LLM traffic or submit historical Claude/Cowork transcripts to the configured Coolhand service. No install-time execution, stealth persistence, or unconsented agent-control mutation was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs coolhand claude, coolhand monitor, or coolhand analyze-claude-sessions.

Impact

Selected LLM prompts, responses, and historical transcripts may be sent to the configured Coolhand endpoint.

Mechanism

User-invoked LLM telemetry capture and upload.

Rationale

The package implements disclosed, explicitly invoked observability features and sends data only through those commands to its configured service. Source inspection found no lifecycle-triggered behavior or covert malicious chain.

Evidence

package.jsondist/cli.jsdist/proxy/wrap-runner.jsdist/proxy/proxy.jsdist/proxy/interceptor.jsdist/sessions/claude-scanner.jsdist/proxy/sender.jsdist/sessions/cowork-scanner.jsdist/config.js

Network endpoints1

coolhandlabs.com/api/v2/llm_request_logs

coolhand-cli@0.7.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code