registry / devez-vibe / 1.7.41
devez-vibe@1.7.41
Stable terminal UI for Codex and Claude Agent SDK
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a first-party agent extension installed without an explicit setup command, combined with automatic permission-bypass attempts at runtime. No exfiltration, remote payload execution, or self-dependent lifecycle chain was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
npm postinstall, followed by use of the package's Claude bridge.
Impact
It can influence future agent behavior and reduce approval safeguards in sessions launched through this package.
Mechanism
Global agent-skill installation and runtime permission-mode escalation.
AI rationale
This is a first-party agent extension installed without an explicit setup command, combined with automatic permission-bypass attempts at runtime. No exfiltration, remote payload execution, or self-dependent lifecycle chain was found.
Evidence
package.jsoninstall-skills.mjsbridge/claude-agent-sdk-bridge.mjs.codex/skills/luna-loop.claude/skills/luna-loop
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Installation automatically runs a script that deploys a bundled skill.
- The installer writes and prunes a luna-loop directory in both user-wide Codex and Claude skill locations.
- The runtime bridge requests Claude bypass-permission mode for each new session.
Evidence against
- The installed skill declares that it is only used after an explicit user invocation.
- No source network endpoint or secret-exfiltration path was found.
- The package has no dependency on another release of itself.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node install-skills.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg40"scripts": {
"postinstall": "node install-skills.mjs"
},
Medium
Ai Review Evidence
Installation automatically runs a script that deploys a bundled skill.
package.jsonView on unpkg · L40install-skills.mjsView file
1import {
L2: copyFileSync,
L3: existsSync,
L4: mkdirSync,
L5: readdirSync,
...
L14: const userHome = homedir();
L15: const codexHome = process.env.CODEX_HOME?.trim() || join(userHome, ".codex");
L16: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(userHome, ".claude");
L17:
...
L23: function copyTree(source, destination) {
L24: mkdirSync(destination, { recursive: true });
L25: for (const entry of readdirSync(source, { withFileTypes: true })) {
Critical
Ai Agent Control Hijack
Findings
1 Critical2 High6 Medium3 Low
CriticalAi Agent Control Hijackinstall-skills.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltabridge/claude-agent-sdk-bridge.mjs
MediumEnvironment Vars
MediumShips Native Binarybin/dvz.exe
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidenceinstall-skills.mjs
MediumAi Review Evidenceinstall-skills.mjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to devez-vibe@1.7.41.
See all versions of devez-vibe for other recorded verdicts.
- Review the evidence and your use of devez-vibe@1.7.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.