iclavue@13.7.0
Clavue: execution-first AI coding CLI with direct repo tools, provider routing, native workflows, MCP integration, and long-session recovery
AI Security Review
scanned 2d ago · by lpm-firewall-aiSource inspection resolved the postinstall and credential-related findings as package-aligned behavior, and the flagged dependency paths contain ordinary library functionality. The scanner labels alone do not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm postinstall runs the pager permission setup; provider probes occur when compatibility validation is requested.
Impact
No unconsented credential disclosure, remote code execution, or harmful system modification was established.
Mechanism
The install hook searches the package's native directory and attempts to set matching pager files executable. The provider adapter constructs probe requests from the configured profile URL and credential.
AI rationale
Source inspection resolved the postinstall and credential-related findings as package-aligned behavior, and the flagged dependency paths contain ordinary library functionality. The scanner labels alone do not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The npm postinstall hook only changes executable permissions on matching files in the package's own native directory; it does not fetch or run remote code.
- The flagged provider adapter sends compatibility probes to the configured provider profile URL using that profile's credential. The inspected source shows no hidden publisher-selected credential recipient.
- The flagged dependency files contain ordinary OpenTelemetry logging and context APIs, schema validation and conversion code, cache code, and sandbox runtime utilities.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
20 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall-pager.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/provider-setup.jsView file
1import { execFileSync, spawnSync } from 'node:child_process'
L2: import { createHash, randomUUID } from 'node:crypto'
High
Child Process
Package source references child process execution.
dist/provider-setup.jsView on unpkg · L1dist/openai-responses-adapter.jsView file
3// clavue v13.7.0 openai-responses-adapter (built from source)
L4: var __create=Object.create;var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __getProtoO...
L5: `)},"logSink");__name(log,"log");__name(isNativeModuleEnabled2,"isNativeModuleEnabled");__name(candidateRoots,"candidateRoots");__name(libraryName,"libraryName");__name(nativeRsAdd...
L6: `),{ok:!0,cleared:!0,speed:null};let next=normalizeDurableExecutionSpeed(raw);return next?(writeJsonAtomic(pathFor(),`${JSON.stringify({speed:next,updatedAt:new Date().toISOString(...
L7: `),{ok:!0,speed:next}):{ok:!1}}catch{return{ok:!1}}}var FILE,init_executionSpeedPersist=__esm({"[redacted].ts"(){init_envUtils();FILE="execution-speed.json";...
L8:
Findings
1 Critical14 High8 Medium6 Low
CriticalCredential Exfiltrationdist/openai-responses-adapter.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/provider-setup.js
HighShelldist/openai-responses-adapter.js
HighEvalnode_modules/ajv/dist/compile/jtd/serialize.js
HighSuspicious Native Addon Loaddist/openai-responses-adapter.js
HighSame File Env Network Executiondist/openai-responses-adapter.js
HighCommand Output Exfiltrationdist/openai-responses-adapter.js
HighCloud Metadata Accessdist/openai-responses-adapter.js
HighSemantic Analysis Limiteddist/openai-responses-adapter.js
HighKnown Malware Source Similarity
Affected versions and remediation
This report applies to iclavue@13.7.0.
See all versions of iclavue for other recorded verdicts.
- Review the evidence and your use of iclavue@13.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.