registry / entracte / 0.2.1

entracte@0.2.1

Cookieless sponsor surfaces for Claude Code — a status line + a sponsored spinner verb. npx entracte

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs npx entracte; configured Claude Code sessions invoke installed hooks.

Impact

Claude UI behavior is persistently changed and sponsor-controlled text/URLs are displayed; an existing entracte token is sent to its API.

Mechanism

Explicit AI-agent extension setup with remote sponsor refresh and credentialed API calls.

Rationale

This is not an unconsented install-time attack: the manifest has no lifecycle scripts and configuration occurs only when the user runs its CLI. It is nevertheless a real explicit-user-command Claude Code integration with persistent hooks and credentialed remote behavior, so warn.

Evidence

package.jsonbin/setup.mjsspinner.mjsstatusline.mjsentracte-mode.mjsREADME.md~/.claude/settings.json~/.claude/settings.json.entracte-bak~/.claude/entracte-statusline.mjs~/.claude/entracte-spinner.mjs~/.claude/entracte-mode.mjs~/.claude/commands/entracte.md~/.config/entracte/credentials.json/tmp/entracte-cur-<session>.json

entracte@0.2.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code