registry / entracte / 0.2.0

entracte@0.2.0

Cookieless sponsor surfaces for Claude Code — a status line + a sponsored spinner verb. npx entracte

AI Security Review

scanned 16h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit setup mutates Claude Code settings to run package-owned hooks per session and turn. Those hooks fetch sponsor content and rewrite spinner settings.

Static reason

No blocking static signals were detected.

Trigger

User runs npx entracte (or the entracte bin).

Impact

Persistent sponsored UI injection and recurring network requests in Claude Code; no confirmed credential or code exfiltration beyond the package token.

Mechanism

Claude Code hook installation with remote sponsor refresh and beacon requests.

Rationale

No automatic npm lifecycle execution or concrete malicious payload chain was found. The explicit command creates durable AI-agent hooks with recurring remote content, which warrants a warning under the extension lifecycle policy.

Evidence

package.jsonbin/setup.mjsspinner.mjsstatusline.mjsREADME.md~/.claude/settings.json~/.claude/settings.json.entracte-bak~/.claude/entracte-statusline.mjs~/.claude/entracte-spinner.mjs~/.claude/commands/entracte.md~/.config/entracte/credentials.json/tmp/entracte-*

Network endpoints3

api.entracte.mbn.dev/api/serve

entracte@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code