registry / oh-my-claude-sisyphus / 5.0.2
oh-my-claude-sisyphus@5.0.2
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe flagged runtime install is a package-aligned updater, while npm installation has no automatic lifecycle trigger. No concrete malicious behavior, self-dependency chain, secret theft, or unconsented broad control-surface mutation was found.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the update functionality, or explicitly enables silent updating.
Impact
It can replace the global package with its latest npm release after an explicit runtime action or opt-in.
Mechanism
Package-aligned global self-update
AI rationale
The flagged runtime install is a package-aligned updater, while npm installation has no automatic lifecycle trigger. No concrete malicious behavior, self-dependency chain, secret theft, or unconsented broad control-surface mutation was found.
Evidence
package.jsondist/features/auto-update.jsdist/tools/ast-tools.jsbin/oh-my-claudecode.js
Network endpoints1
api.github.com/repos/Yeachan-Heo/oh-my-claudecode
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The explicit runtime update function globally installs the package's latest release.
Evidence against
- package.json has no preinstall, install, or postinstall hook; prepublishOnly is publisher-side.
- The update path is reached through package runtime commands, not dependency installation.
- Silent updates are disabled unless enabled in configuration.
- The dynamic module loading is a fixed dependency import, not arbitrary code loading.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggeddist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
bridge/mcp-server.cjsView file
2955sourceCode = this.opts.code.process(sourceCode, sch);
L2956: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
L2957: const validate = makeValidate(this, this.scope.get());
Low
Eval
Package source references a known benign dynamic code generation pattern.
Findings
8 High7 Medium7 Low
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighEntrypoint Foreign Package Code Overwritedist/features/auto-update.js
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
HighRuntime Package Installdist/features/auto-update.js
HighPayload In Excluded Dirskills/project-session-manager/tests/test-jira-provider.sh
MediumDynamic Requiredist/tools/ast-tools.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helper
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.0.2.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.