registry / oh-my-claude-sisyphus / 5.7.17
oh-my-claude-sisyphus@5.7.17
⚠ Under reviewMulti-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected postinstall hook performs an optional macOS native build, and the flagged bridge behaviors have configured activation and authorization checks. The declared SDK dependency remains unresolved in the available source inspection, so this review cannot establish a clean verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Use of the package’s SDK integration may load the declared dependency.
Impact
No concrete harmful effect was established; the incomplete dependency review prevents a clean verdict.
Mechanism
The available inspection data does not resolve the dependency source, so its behavior could not be assessed.
AI rationale
The inspected postinstall hook performs an optional macOS native build, and the flagged bridge behaviors have configured activation and authorization checks. The declared SDK dependency remains unresolved in the available source inspection, so this review cannot establish a clean verdict.
Evidence
package.jsonbridge/cli.cjsscripts/postinstall-contained-fs.mjsdist/index.js
Decision evidence
public snapshotAI called this Manual Review at 67.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares a postinstall hook for the optional contained-fs build.
- The postinstall source limits that build to macOS and exits when the native binary already exists.
- The bridge requires configured bot credentials and channel details, and disables polling when no authorized Discord user IDs are set.
- The bridge ignores messages from users outside the configured authorized ID list.
- The bridge’s dynamic function construction appears in bundled schema-validation code.
- The manifest declares @anthropic-ai/claude-agent-sdk, whose dependency source snapshot was unresolved in the supplied inspection data.
Evidence against
- No confirmed attack behavior was established in the inspected install hook or bridge excerpts.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
2 Critical17 High8 Medium6 Low
CriticalRemote Response Code Executionbridge/cli.cjs
CriticalPrevious Version Dangerous Deltadist/features/auto-update.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEvalbridge/cli.cjs
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.17.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.