registry / create-stead / 0.2.0

create-stead@0.2.0

Stead: an agentic OS for your life. Workspaces for the pillars of your life, agents acting in your stead.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The user-invoked scaffold installs a first-party Claude Code extension. If uv is present, it writes MCP entries that later launch a pinned remote-source memory server.

Static reason

No blocking static signals were detected.

Trigger

User runs `npm create stead`; later Claude Code loads generated MCP configuration.

Impact

A user-created agent workspace gains local MCP capabilities, including a Keychain-backed vault service.

Mechanism

Claude/MCP scaffolding with deferred uvx remote-source execution.

Rationale

No malicious install hook, exfiltration, or unconsented broad control-surface mutation was found. The package nevertheless sets up an agent extension and deferred remote-source MCP execution, so it warrants a warning.

Evidence

package.jsonbin/stead.jsvendor/kernel/bin/install.jsvendor/kernel/bin/lib.jsvendor/kernel/bin/memory-wire.jsvendor/kernel/bin/vault-mcp.js

Network endpoints2

gitlab.com/getstead/stead.git@stead-memory-0.1.0#subdirectory=stead-memorygitlab.com/getstead/stead-skills.git

create-stead@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Findings