registry  /  fadeno  /  0.3.0

fadeno@0.3.0

Portable, repo-native playbook layer for AI coding agents (Codex, Claude Code).

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
No blocking static signals were detected.
Trigger
User runs `fadeno init --claude`.
Impact
Future `fadeno:*` Bash commands may be approved by Claude Code without repeated prompts in that repository.
Mechanism
Explicit local AI-agent configuration and template scaffolding.
Rationale
Source inspection found no concrete malicious chain, network exfiltration, shell execution, or install-time foreign control-surface mutation. Per policy, the explicit user-command agent permission mutation remains a warning-level capability risk.
Evidence
package.jsondist/commands/init.jsdist/lib/fsutil.jsdist/cli.jstemplates/claude/hooks/settings.example.jsontemplates/common/hooks/pre-commit.claude/settings.local.json.gitignore.claude/skills.claude/agents.codex/agentsAGENTS.mdCLAUDE.md.fadeno.github/workflows

Decision evidence

public snapshot
AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • `dist/commands/init.js` writes `.claude/settings.local.json` with `Bash(fadeno:*)`.
  • The same explicit init command scaffolds `.claude`, `.codex`, and optional CI/hook files.
  • `templates/claude/hooks/settings.example.json` contains a Claude Stop-hook command template.
Evidence against
  • `package.json` has `prepare` and `prepublishOnly`, but no `preinstall`, `install`, or `postinstall`.
  • `prepare` only invokes the TypeScript build and chmods `dist/cli.js`.
  • `dist/**/*.js` imports filesystem, path, YAML, and validation utilities; no network or child-process API use was found.
  • Agent/config writes occur only through user-invoked `fadeno init`, not on import or installation.
Behavioral surface
Source
Filesystem
Supply chain
HighEntropyStrings
ManifestNo manifest risk signals triggered.
scanned 16 file(s), 99.6 KB of source

Source & flagged code

2 flagged · loading source
dist/commands/init.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/commands/init.js` writes `.claude/settings.local.json` with `Bash(fadeno:*)`.

dist/commands/init.jsView on unpkg
templates/claude/hooks/settings.example.jsonView file
•Published source reference
Medium
Ai Review Evidence

`templates/claude/hooks/settings.example.json` contains a Claude Stop-hook command template.

templates/claude/hooks/settings.example.jsonView on unpkg

Findings

3 Medium4 Low
MediumAi Review Evidencedist/commands/init.js
MediumAi Review Evidence
MediumAi Review Evidencetemplates/claude/hooks/settings.example.json
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings