registry / oh-my-claude-sisyphus / 5.7.19
oh-my-claude-sisyphus@5.7.19
⚠ Under reviewMulti-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 9d ago · by lpm-firewall-aiThe inspected postinstall path is a guarded optional native build, and the bridge's dynamic function generates a schema validator. The runtime dependency @anthropic-ai/claude-agent-sdk is selected by the package and imported during agent execution, but its source was unresolved, so a clean verdict is not supported.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Agent execution reaches the SDK import; package installation triggers the optional native-build hook.
Impact
The inspected package code does not establish harmful effects; behavior inside the unresolved SDK remains unverified.
Mechanism
The inspected postinstall code skips non-macOS platforms and otherwise attempts a package-local native build. The SDK implementation was unavailable for source review.
AI rationale
The inspected postinstall path is a guarded optional native build, and the bridge's dynamic function generates a schema validator. The runtime dependency @anthropic-ai/claude-agent-sdk is selected by the package and imported during agent execution, but its source was unresolved, so a clean verdict is not supported.
Evidence
scripts/postinstall-contained-fs.mjsdist/graph/runtime/executors/agent.js
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The postinstall hook skips non-macOS systems and attempts only an optional native build on macOS.
- The package declares the Claude Agent SDK as a runtime dependency and imports it in agent execution paths.
- The bridge's dynamic function constructs a schema validator from generated validation code.
- The inspected test location creates a security regression fixture; this does not establish an attack.
Evidence against
- No concrete malicious behavior was established in the inspected source excerpts.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
2 Critical17 High8 Medium6 Low
CriticalRemote Response Code Executionbridge/cli.cjs
CriticalPrevious Version Dangerous Deltadist/features/auto-update.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEvalbridge/cli.cjs
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.19.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.