registry / oh-my-claude-sisyphus / 5.7.11
oh-my-claude-sisyphus@5.7.11
⚠ Under reviewMulti-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe package’s install hook is a guarded optional native build, and the inspected source did not establish attack behavior. The directly used Agent SDK remains unresolved, so this snapshot does not support a clean verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Use of runtime modules that import the Anthropic Agent SDK.
Impact
The dependency's behavior remains unknown; no attack impact is established by the inspected source.
Mechanism
The package declares and imports the SDK, but its implementation was not available in the inspected snapshot.
AI rationale
The package’s install hook is a guarded optional native build, and the inspected source did not establish attack behavior. The directly used Agent SDK remains unresolved, so this snapshot does not support a clean verdict.
Evidence
package.jsondist/mcp/omc-tools-server.jsdist/graph/runtime/executors/agent.js
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with high false-positive risk.
AI review observations
- The manifest declares the Anthropic Agent SDK as a runtime dependency, and shipped runtime modules import it directly.
- The package snapshot does not resolve the SDK implementation, so its behavior cannot be assessed from the available source.
Evidence against
- The npm postinstall hook skips development and non-macOS installs, and only attempts to build the optional native module.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
2 Critical17 High8 Medium6 Low
CriticalRemote Response Code Executionbridge/cli.cjs
CriticalPrevious Version Dangerous Deltadist/features/auto-update.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEvalbridge/cli.cjs
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.11.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.