iclavue@11.4.5
Clavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource inspection did not substantiate the scanner’s credential-exfiltration hint: the adapter excerpt shows an ordinary provider endpoint and API-key authentication configuration. The postinstall hook performs bounded pager binary permission setup, and no concrete attack behavior was identified in the cited excerpts.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation triggers postinstall; provider and proxy code are used by the CLI when those features are invoked.
Impact
No malicious impact was established from the inspected behavior.
Mechanism
The hook searches the package’s native directory and applies executable permissions to pager-named files. The inspected adapter excerpt configures an API provider endpoint and authentication method.
AI rationale
Source inspection did not substantiate the scanner’s credential-exfiltration hint: the adapter excerpt shows an ordinary provider endpoint and API-key authentication configuration. The postinstall hook performs bounded pager binary permission setup, and no concrete attack behavior was identified in the cited excerpts.
Evidence
dist/native
Network endpoints1
api.openai.com/v1
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json’s postinstall runs a pager setup script, while prepublishOnly is a release check.
- The bundled CLI imports its sandbox manager and child-process support as part of its command-line implementation.
- The flagged adapter includes an OpenAI API provider endpoint and API-key authentication configuration, consistent with provider requests.
- The flagged proxy module imports networking and URL utilities consistent with HTTP proxy support.
- The postinstall script chmods files whose names begin with clavue-pager inside the package’s native directory.
Evidence against
- Inspection found no source evidence that the flagged adapter sends credentials to an unrelated or package-controlled endpoint.
- The install hook’s inspected behavior is limited to locating optional pager binaries and setting executable permissions.
- The cited sandbox proxy excerpt shows network plumbing imports but no credential harvesting or exfiltration behavior.
Behavioral surface
ChildProcessCryptoDynamicRequire
Source & flagged code
14 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall-pager.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,tmpPath=`${filePath}.${process4.pid}.${Date.now()}.${Math.random().toString(36).slice(2,8)}.tmp`;try{fs.writeFileSync(tmpPath,payload,"utf8"),fs.renameSync(tmpPath,filePath)}catc...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L4node_modules/@anthropic-ai/sandbox-runtime/dist/cli.jsView file
Findings
2 Critical7 High8 Medium6 Low
CriticalCredential Exfiltrationdist/openai-responses-adapter.js
CriticalPrevious Version Dangerous Deltanode_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/parent-proxy.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/mao-command.js
HighShellnode_modules/@anthropic-ai/sandbox-runtime/dist/cli.js
HighSame File Env Network Executiondist/openai-responses-adapter.js
HighCommand Output Exfiltrationdist/openai-responses-adapter.js
HighCloud Metadata Accessdist/openai-responses-adapter.js
HighSemantic Analysis Limiteddist/openai-responses-adapter.js
MediumDynamic Requirenode_modules/@opentelemetry/api/build/src/metrics/NoopMeterProvider.js
Affected versions and remediation
This report applies to iclavue@11.4.5.
See all versions of iclavue for other recorded verdicts.
- Review the evidence and your use of iclavue@11.4.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.