registry / gm-plugkit / 2.0.2000

gm-plugkit@2.0.2000

⚠ Under review

Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 326 KB of source, external domains: 127.0.0.1, api.github.com, github.com, registry.npmjs.org

Source & flagged code

10 flagged

supervisor.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

supervisor.jsView on unpkg · L3

6const os = require('os');

7const crypto = require('crypto');

8const { spawn, spawnSync } = require('child_process');

9const { gmToolsDir, resolveProjectRoot } = require('./bootstrap');

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

10const { logEvent: _sharedLogEvent, GM_LOG_ROOT: _sharedGmLogRoot } = require('./gm-log');

11const { pidCommandLineForKillGuard: _sharedPidCommandLine, pidAliveSync, waitForPidDeath } = require('./gm-process');

13function wrapperSha12OnDisk() {

14 try {

15 const wp = path.join(gmToolsDir(), 'plugkit-wasm-wrapper.js');

16 return crypto.createHash('sha256').update(fs.readFileSync(wp)).digest('hex').slice(0, 12);

17 } catch (_) { return null; }

18}

20// Root the spool/lock state at the git common dir (see resolveProjectRoot's

21// own doc comment in bootstrap.js for the full worktree-dedup rationale) so

22// a worktree-spawned supervisor shares its lock/spoolDir with the main-repo

23// checkout instead of always cold-booting its own independent watcher.

24const projectDir = resolveProjectRoot(process.env.CLAUDE_PROJECT_DIR || process.cwd());

25const spoolDir = path.join(projectDir, '.gm', 'exec-spool');

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

26fs.mkdirSync(spoolDir, { recursive: true });

plugkit-wasm-wrapper.jsView file

Lines 1-24javascript

1import fs from 'fs';

2import path from 'path';

3import os from 'os';

4import crypto from 'crypto';

Source & flagged code

10 flagged · loading source

supervisor.jsView file

7const crypto = require('crypto'); L8: const { spawn, spawnSync } = require('child_process'); L9: const { gmToolsDir, resolveProjectRoot } = require('./bootstrap');

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

7Cross-file remote execution chain: supervisor.js spawns plugkit-wasm-wrapper.js; helper contains network access plus dynamic code execution. L7: const crypto = require('crypto'); L8: const { spawn, spawnSync } = require('child_process'); L9: const { gmToolsDir, resolveProjectRoot } = require('./bootstrap'); ... L23: // checkout instead of always cold-booting its own independent watcher. L24: const projectDir = resolveProjectRoot(process.env.CLAUDE_PROJECT_DIR || process.cwd()); L25: const spoolDir = path.join(projectDir, '.gm', 'exec-spool'); ... L90: let supTs = 0; L91: try { supTs = (JSON.parse(fs.readFileSync(SUPERVISOR_PATH, 'utf-8')).ts) || 0; } catch (_) {} L92: const spool = readStatus(); ... L110: try { process.kill(other, 'SIGTERM'); } catch (_) {} L111: if (process.platform === '

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

3L4: const fs = require('fs'); L5: const path = require('path');

Findings

2 Critical6 High4 Medium4 Low

CriticalSame File Env Network Executionplugkit-wasm-wrapper.js

CriticalTrigger Reachable Dangerous Capabilityplugkit-wasm-wrapper.js

HighChild Processsupervisor.js

HighShellplugkit-wasm-wrapper.js

HighEvalplugkit-wasm-wrapper.js

HighCommand Output Exfiltrationplugkit-wasm-wrapper.js

HighCross File Remote Execution Contextsupervisor.js

HighRuntime Package Installplugkit-wasm-wrapper.js

MediumDynamic Requiresupervisor.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowWeak Crypto

Affected versions and remediation

This report applies to gm-plugkit@2.0.2000.

See all versions of gm-plugkit for other recorded verdicts.

Review the evidence and your use of gm-plugkit@2.0.2000 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-19 14:25:06.458Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.