registry / linkshell-cli / 0.10.40
linkshell-cli@0.10.40
Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe postinstall hook only changes permissions on node-pty helper files and contains no collection or network behavior. Reviewed runtime requests follow the user-invoked LinkShell login flow, and the host’s account-token provider is gated to the official gateway.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installation runs the postinstall hook; login and host features run when invoked by the user.
Impact
The inspected behavior did not establish an unconsented installation beacon, credential disclosure to an unrelated recipient, or other concrete attack.
Mechanism
The hook locates existing node-pty helpers and changes their permissions. Login uses a loopback callback and sends its token to the configured LinkShell Supabase endpoint; the host only supplies an account token to the official gateway.
AI rationale
The postinstall hook only changes permissions on node-pty helper files and contains no collection or network behavior. Reviewed runtime requests follow the user-invoked LinkShell login flow, and the host’s account-token provider is gated to the official gateway.
Evidence
package.jsonscripts/postinstall.mjsdist/cli/src/commands/login.jsdist/cli/src/auth.jsdist/cli/src/commands/host.jsdist/host/src/ports.js
Network endpoints2
itool.tech/en/auth/linkshellmkbeusztkzffnzjdwmqk.supabase.co
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs the postinstall script; that script locates node-pty helper files and changes their permissions.
- Port discovery runs local listener enumeration commands and parses their output.
- Login sends the received access token to the configured Supabase user endpoint.
- The host supplies an account token only when the selected gateway matches LinkShell’s official gateway.
- The login flow opens the LinkShell authentication page with a loopback callback.
- The Supabase endpoint is defined in the CLI authentication module.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/host/src/ports.jsView file
1import { execFile } from "node:child_process";
L2: import { readlink } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
1 Critical6 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/cli/src/commands/host.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/host/src/ports.js
HighShell
HighCommand Output Exfiltrationdist/cli/src/commands/login.js
HighTrigger Reachable Command Output Exfiltrationdist/cli/src/commands/login.js
HighSemantic Analysis Limiteddist/cli/src/commands/host.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/cli/src/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to linkshell-cli@0.10.40.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.10.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.