registry / linkshell-cli / 0.10.84
linkshell-cli@0.10.84
Follow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe install hook only repairs node-pty helper permissions. The flagged process execution and network flows are tied to explicit upgrade or sign-in actions, and the Antigravity credential use is limited to its local language server.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The permission fix runs at install; upgrade and sign-in run when their commands are invoked; the Antigravity integration runs as part of agent support.
Impact
The inspected behaviors support installation, updating, authentication, and local agent integration; no unauthorized collection or action was found.
Mechanism
The install hook adjusts node-pty helper permissions. Upgrade contacts the npm registry and runs the selected package manager. Sign-in uses the configured auth flow, while Antigravity requests go to its local language server.
AI rationale
The install hook only repairs node-pty helper permissions. The flagged process execution and network flows are tied to explicit upgrade or sign-in actions, and the Antigravity credential use is limited to its local language server.
Evidence
scripts/postinstall.mjsdist/cli/src/commands/upgrade.jsdist/cli/src/commands/upgrade-worker.jsdist/cli/src/commands/sign-in.jsdist/host/src/drivers/acp/antigravity.js
Network endpoints5
registry.npmjs.org/linkshell-cli/latestitool.tech/api/linkshell/authmkbeusztkzffnzjdwmqk.supabase.co/auth/v1/usermkbeusztkzffnzjdwmqk.supabase.co/auth/v1/token127.0.0.1:<port>/exa.language_server_pb.LanguageServerService/*
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The postinstall hook only locates node-pty's platform helpers and fixes their permissions.
- The upgrade logic is registered as an explicit `linkshell upgrade` command; its process execution serves the requested package and host update.
- Sign-in exchanges send the submitted grant to the package's configured auth proxy, with a direct Supabase fallback.
- The Antigravity integration reads a local language-server CSRF token and uses it for requests to that service on 127.0.0.1.
Evidence against
- The package defines an install-time lifecycle script and includes process execution, but the inspected behaviors match its CLI, updater, and agent-integration purpose.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
21 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/host/src/ports.jsView file
1import { execFile } from "node:child_process";
L2: import { readlink } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
19 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/host/src/ports.js
HighShell
HighCommand Output Exfiltrationdist/cli/src/commands/upgrade.js
HighSandbox Evasion Gated Capabilitydist/cli/src/commands/upgrade.js
HighTrigger Reachable Command Output Exfiltrationdist/cli/src/commands/upgrade.js
HighSemantic Analysis Limiteddist/cli/src/commands/host.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/cli/src/commands/desktop.js
HighKnown Malware Source Similaritysrc/commands/desktop.ts
HighKnown Malware Source Similaritydist/host/src/input.js
HighKnown Malware Source Similaritydist/host/src/drivers/acp/antigravity.js
Affected versions and remediation
This report applies to linkshell-cli@0.10.84.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.10.84 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.