registry / oh-my-claude-sisyphus / 5.7.15
oh-my-claude-sisyphus@5.7.15
⚠ Under reviewMulti-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe inspected install hook only attempts an optional native build, and silent updates require configuration opt-in. The Agent SDK is an unresolved runtime dependency used by package code, so its behavior remains unverified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Invoking the graph executor or MCP server that uses the Agent SDK.
Impact
No harmful effect was established; the unresolved runtime dependency prevents a clean determination.
Mechanism
Package code dynamically imports or uses the declared SDK; its dependency behavior could not be assessed from the available source snapshot.
AI rationale
The inspected install hook only attempts an optional native build, and silent updates require configuration opt-in. The Agent SDK is an unresolved runtime dependency used by package code, so its behavior remains unverified.
Evidence
package.jsondist/graph/runtime/executors/agent.jsdist/mcp/omc-tools-server.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook calls a script that skips non-macOS systems and only attempts to build the package’s optional native module when it is missing.
- The declared Agent SDK is dynamically imported by the graph executor; that executor allows read-only tools and denies others.
- The MCP server also imports the Agent SDK, whose registry source could not be inspected in the available dependency evidence.
- Silent updates are disabled unless enabled in configuration, and the session-start hook calls an update check that enforces that setting.
- The dynamic-function match appears in validator-generation code; inspection did not establish execution of code from a remote response.
Evidence against
- No concrete attack behavior was established in the inspected package source.
- The unresolved Agent SDK is a declared runtime dependency used by package code, so its behavior remains unassessed.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEval
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
2 Critical17 High8 Medium6 Low
CriticalRemote Response Code Executionbridge/cli.cjs
CriticalPrevious Version Dangerous Deltadist/features/auto-update.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEvalbridge/cli.cjs
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.15.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.