mtech-ai-local-runner@0.1.56
⚠ Under reviewClaude Code runs UserPromptSubmit for turns nobody typed as well: an asyncRewake wake, a task notification, a message from another session, a side session's brief (Work Item e1c08b33, Work Decision cc8817f9). The ask hook client now classifies each prompt
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe manifest has no npm install hook, and inspected agent integration writes are explicitly invoked. The behavior of two packaged native helpers used in sensitive checks remains unresolved, so the available evidence does not support a clean or malicious verdict.
Decision evidence
public snapshot- package.json shows no npm install lifecycle hook; its scripts are build and user-facing CLI commands.
- Agent integration changes run through the explicit integrations install command; setup integration work is requested separately.
- The native metadata helper invokes a pinned executable for local account metadata, and the policy client invokes a pinned executable for policy inventory.
- Offline analysis of both shipped native executables reports an unrecognized format and says their behavior remains unresolved.
- The inspected policy client verifies the helper against a compiled pin and checks its file ownership, permissions, and hash before use.
- Agent integration files are written by the explicit integration installer.
Source & flagged code
5 flaggedPackage text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgPackage source references dynamic require/import behavior.
dist/src/adapters/codex/pre-model-gate.jsView on unpkg · L29Findings
Affected versions and remediation
This report applies to mtech-ai-local-runner@0.1.56.
See all versions of mtech-ai-local-runner for other recorded verdicts.
- Review the evidence and your use of mtech-ai-local-runner@0.1.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.