registry / linkshell-cli / 0.10.74
linkshell-cli@0.10.74
Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe install-time hook only adjusts permissions on node-pty helper binaries. The reviewed credential and network activity belongs to explicit login and upgrade commands; no unrelated credential exfiltration or harmful automatic behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The postinstall hook runs during installation; login and upgrade behavior require the corresponding CLI command.
Impact
No unrelated credential transfer, concealed execution, or harmful automatic action was found in the inspected paths.
Mechanism
The install hook adjusts node-pty helper permissions. Login opens the package’s sign-in flow and checks the returned token against its configured account service. Upgrade checks the npm registry.
AI rationale
The install-time hook only adjusts permissions on node-pty helper binaries. The reviewed credential and network activity belongs to explicit login and upgrade commands; no unrelated credential exfiltration or harmful automatic behavior was found.
Evidence
scripts/postinstall.mjsdist/cli/src/commands/login.jsdist/cli/src/commands/upgrade.js
Network endpoints2
itool.techregistry.npmjs.org/linkshell-cli/latest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook only adjusts permissions on node-pty spawn-helper binaries for supported platforms.
- Login is an explicit CLI command that opens the documented iTool sign-in page and receives its callback on a loopback server.
- The returned access token is used to authenticate to the configured Supabase user endpoint during login.
- The upgrade command contacts the npm registry to check this package’s latest version.
Evidence against
- Login handles access and refresh tokens, but the reviewed flow uses them as part of the explicit sign-in process.
- The package runs a postinstall hook, but its source shows a node-pty permission fix and no network contact.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/host/src/ports.jsView file
1import { execFile } from "node:child_process";
L2: import { readlink } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
1 Critical7 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/host/src/drivers/claude/driver.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/host/src/ports.js
HighShell
HighCommand Output Exfiltrationdist/cli/src/commands/upgrade.js
HighSandbox Evasion Gated Capabilitydist/cli/src/commands/upgrade.js
HighTrigger Reachable Command Output Exfiltrationdist/cli/src/commands/login.js
HighSemantic Analysis Limiteddist/cli/src/commands/host.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/cli/src/index.js
MediumNetwork
Affected versions and remediation
This report applies to linkshell-cli@0.10.74.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.10.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.