registry / oh-my-claude-sisyphus / 5.7.22
oh-my-claude-sisyphus@5.7.22
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe install hook is limited to an optional macOS native build. The suspicious gateway flow is an opt-in Jev integration using a dedicated Typesafe key and configurable endpoint; the reviewed source does not show automatic redirection of an Anthropic credential.
Static reason
One or more suspicious static signals were detected.
Trigger
Postinstall attempts the addon build on macOS when it is absent; Jev requests require a configured API key and judgment point.
Impact
No malicious behavior was identified in the reviewed flows. Jev shares configured state with the selected service when enabled.
Mechanism
The postinstall script invokes the package's build script. Jev posts bounded state and questions to its configured endpoint using the dedicated Typesafe API key.
AI rationale
The install hook is limited to an optional macOS native build. The suspicious gateway flow is an opt-in Jev integration using a dedicated Typesafe key and configurable endpoint; the reviewed source does not show automatic redirection of an Anthropic credential.
Network endpoints1
api.typesafe.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook skips non-macOS platforms and only attempts to build the package’s optional native addon.
- The Jev client reads a dedicated TYPESAFE_API_KEY and sends requests only for configured judgment points; its endpoint can be overridden.
- The CLI bin delegates to bridge/cli.cjs, where the reviewed Jev flow is configuration-gated.
Evidence against
- When enabled, Jev sends bounded state and questions with a bearer key to its configured endpoint; the default is https://api.typesafe.ai/v1/systemone. This is an explicit external-service integration, not an Anthropic-key redirect.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
23 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
16 High8 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
HighCopied Package Dependency Bridgebridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.22.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.