registry / oh-my-claude-sisyphus
oh-my-claude-sisyphus
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
This report shows the evidence for oh-my-claude-sisyphus@5.7.30. 0 of 44 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe install hook only invokes the package's optional local native build. The inspected outbound feature requires both a Typesafe key and explicit per-point opt-in, so no malicious default behavior was identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Jev requests require a Typesafe API key and explicit OMC_JEV point selection.
Impact
No automatic credential exfiltration or unauthorized account action was identified.
Mechanism
The feature posts judgment state and questions to its configured endpoint with the supplied Typesafe key.
AI rationale
The install hook only invokes the package's optional local native build. The inspected outbound feature requires both a Typesafe key and explicit per-point opt-in, so no malicious default behavior was identified.
Evidence
package.jsonscripts/postinstall-contained-fs.mjsdist/hooks/jev/config.jsbridge/cli.cjs
Network endpoints1
api.typesafe.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook skips development installs, non-macOS platforms, and installs where the native addon already exists; otherwise it runs the package's optional local build script.
- The Jev feature requires a Typesafe API key and explicit OMC_JEV point opt-in; a key alone enables no requests.
- When enabled, Jev posts judgment state and questions to api.typesafe.ai using the supplied Typesafe key.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
1 Critical16 High8 Medium7 Low
CriticalPrevious Version Dangerous Deltabridge/cli.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.30.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.