registry / oh-my-claude-sisyphus / 5.7.21
oh-my-claude-sisyphus@5.7.21
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe install hook only attempts a local native build, and the flagged outbound path belongs to a documented Jev feature that requires explicit configuration. Its API key is a Jev credential, and the reviewed code does not redirect Anthropic credentials to that service.
Static reason
One or more suspicious static signals were detected.
Trigger
Jev requires a TYPESAFE_API_KEY and configured judgment points; the install hook builds only on macOS when the native addon is absent.
Impact
Configured users share limited orchestration context with the Jev service; no automatic credential theft or unrelated install-time network behavior was identified.
Mechanism
Configured Jev calls send bounded state and questions to the configured endpoint, defaulting to api.typesafe.ai/v1/systemone, with the Jev API key.
AI rationale
The install hook only attempts a local native build, and the flagged outbound path belongs to a documented Jev feature that requires explicit configuration. Its API key is a Jev credential, and the reviewed code does not redirect Anthropic credentials to that service.
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook is limited to an optional local native build; the build script uses local Node headers and does not download binaries.
- Jev requires a configured API key and judgment points, and the README documents its modes and states that it sends nothing without configuration.
- When enabled, Jev sends bounded state and questions to its documented API endpoint using the Jev API key; this is an explicit integration, not an Anthropic credential redirect.
Evidence against
- When configured, Jev sends orchestration state and questions to api.typesafe.ai/v1/systemone, which may include excerpts of user task context.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
23 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
16 High8 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
HighCopied Package Dependency Bridgebridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.21.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.