registry / linkshell-cli / 0.6.4
linkshell-cli@0.6.4
⚠ Under reviewFollow, steer and approve the coding agents on your computer (Claude Code, Codex, Gemini, Copilot and more) from your phone
AI Security Review
scanned 26d ago · by lpm-firewall-aiInspection found package-aligned screen capture, port discovery, authentication, and upgrade behavior, alongside a runtime agent-settings sweep whose effective scope and caller consent were not established. Relevant static analysis also reports parse errors, so a clean or malicious conclusion is not supported by the inspected source.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The package has a postinstall hook; the settings sweep is part of runtime hook handling, but its activation path was not established here.
Impact
Potential agent configuration changes remain unresolved; the evidence does not establish credential theft or another confirmed attack.
Mechanism
The sweep reads hook configuration and may write updated JSON when changes are found. The available excerpt does not show which entries are removed.
AI rationale
Inspection found package-aligned screen capture, port discovery, authentication, and upgrade behavior, alongside a runtime agent-settings sweep whose effective scope and caller consent were not established. Relevant static analysis also reports parse errors, so a clean or malicious conclusion is not supported by the inspected source.
Evidence
package.jsonsrc/runtime/hook-command.tsdist/cli/src/runtime/hook-command.js
Decision evidence
public snapshotAI called this Manual Review at 66.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json defines a postinstall hook that runs scripts/postinstall.mjs.
- The hook-command implementations enumerate Claude, Codex, and Gemini settings files; the source implementation parses hook entries and writes a file only when its sweep reports a change.
- The Claude SDK code uses the Claude projects directory for project data.
- The screen fallback captures a local screen image; the ports utility enumerates listening ports.
- Login and upgrade contain service-authentication and package-upgrade behavior, while the cited host code handles environment selection.
Evidence against
- The runtime hook sweep writes agent settings files, and the inspected excerpt does not establish the exact filter or caller consent.
- Static analysis reports parse errors in relevant source files, leaving the complete behavior unresolved.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/host/src/ports.jsView file
1import { execFile } from "node:child_process";
L2: import { readlink } from "node:fs/promises";
High
Child Process
Package source references child process execution.
dist/host/src/ports.jsView on unpkg · L1Findings
1 Critical7 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli/src/commands/host.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/host/src/ports.js
HighShelldist/cli/src/runtime/screen-fallback.js
HighCommand Output Exfiltrationdist/cli/src/commands/login.js
HighTrigger Reachable Command Output Exfiltrationdist/cli/src/commands/login.js
HighRuntime Package Installdist/cli/src/commands/upgrade.js
HighSemantic Analysis Limiteddist/cli/src/commands/host.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to linkshell-cli@0.6.4.
See all versions of linkshell-cli for other recorded verdicts.
- Review the evidence and your use of linkshell-cli@0.6.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.