iclavue@13.5.0
⚠ Under reviewClavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe inspected lifecycle hook is narrow, and the provider configuration does not establish an unrelated credential recipient. However, the package ships platform-specific native pager executables that the available offline analyses could not resolve, so their runtime behavior remains materially uncertain.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Launching the CLI on a platform that selects a bundled pager.
Impact
The unresolved executables prevent a clean assessment; no specific harmful effect is established.
Mechanism
The pager executables are included in the package, but offline analysis could not identify their format or behavior.
AI rationale
The inspected lifecycle hook is narrow, and the provider configuration does not establish an unrelated credential recipient. However, the package ships platform-specific native pager executables that the available offline analyses could not resolve, so their runtime behavior remains materially uncertain.
Evidence
dist/clavue.jsdist/cli.js.lpm-inspection-Okj4Dm/0-87d2f7b485d5.txt.lpm-inspection-Okj4Dm/1-2d2ac5a60d29.txt.lpm-inspection-Okj4Dm/2-07ceca85bff1.txt.lpm-inspection-Okj4Dm/3-2d2ac5a60d29.txtdist/native/clavue-pagerdist/native/clavue-pager-linux-x64dist/native/clavue-pager-darwin-x64dist/native/clavue-pager-darwin-arm64
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package’s CLI commands enter the bundled JavaScript CLI through dist/clavue.js.
- The postinstall hook handles an optional native UI and limits its file changes to pager executables in the package’s native directory.
- Offline analyses identify four bundled native pager executables but cannot resolve their format or behavior.
Evidence against
- The inspected lifecycle code only changes executable permissions on package-owned pager files; it does not establish harmful install-time behavior.
- The inspected provider configuration pairs credentials with a configured API endpoint, defaulting to api.clavue.com.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
14 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall-pager.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/mao-command.jsView file
4var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: GFS4: `),console.error(m)},"debug"));fs6[gracefulQueue]||(queue=global[gracefulQueue]||[],publishQueue(fs6,queue),fs6.close=(function(fs$close){function close(fd,cb){return fs$clos...
L6: `,tmpPath=`${filePath}.${process4.pid}.${Date.now()}.${Math.random().toString(36).slice(2,8)}.tmp`;try{fs.writeFileSync(tmpPath,payload,"utf8"),fs.renameSync(tmpPath,filePath)}catc...
High
Child Process
Package source references child process execution.
dist/mao-command.jsView on unpkg · L416${formatCommandFailure(result)}
L17: `}:{type:"text",value:renderJobResult2(completedJob)}}__name(runForegroundJob2,"runForegroundJob");function getStatusJobs2(cwd,limit=8,all=!1){let jobs=listEnrichedJobs(cwd);return...
L18: `,"utf8")}finally{try{await release()}catch{}}return filePath}__name(writeMaoCoordinationLedger,"writeMaoCoordinationLedger");async function acquireLedgerLock(filePath){try{await f...
Findings
1 Critical8 High8 Medium6 Low
CriticalCredential Exfiltrationdist/openai-responses-adapter.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/mao-command.js
HighShelldist/mao-command.js
HighEvalnode_modules/ajv/dist/compile/jtd/serialize.js
HighSame File Env Network Executiondist/openai-responses-adapter.js
HighCommand Output Exfiltrationdist/openai-responses-adapter.js
HighCloud Metadata Accessdist/openai-responses-adapter.js
HighSemantic Analysis Limiteddist/openai-responses-adapter.js
MediumDynamic Requiredist/openai-responses-adapter.js
MediumNetwork
Medium
Affected versions and remediation
This report applies to iclavue@13.5.0.
See all versions of iclavue for other recorded verdicts.
- Review the evidence and your use of iclavue@13.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.