registry / oh-my-claude-sisyphus / 5.7.25
oh-my-claude-sisyphus@5.7.25
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe install hook performs only a platform-gated optional native build and does not contact a host. The fixed Jev endpoint is used only when configured with an API key and selected points, and the endpoint can be overridden.
Static reason
One or more suspicious static signals were detected.
Trigger
Jev requires a configured API key and selected points; configuration installation runs only when the user invokes `omc install`.
Impact
Configured Jev data is sent to the selected service; no automatic credential theft, unrelated install-time contact, or unrequested agent configuration write was identified.
Mechanism
Jev posts bounded state and questions to its configured endpoint. The postinstall hook only attempts the package’s optional native build on macOS.
AI rationale
The install hook performs only a platform-gated optional native build and does not contact a host. The fixed Jev endpoint is used only when configured with an API key and selected points, and the endpoint can be overridden.
Evidence
scripts/postinstall-contained-fs.mjsbridge/cli.cjs
Network endpoints1
api.typesafe.ai
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook only attempts to build the optional native module on macOS; it exits on other platforms.
- Jev is disabled unless TYPESAFE_API_KEY is set and it is not explicitly switched off; configured points determine whether it runs.
- Jev sends its state and questions to a configurable endpoint, with api.typesafe.ai as the default.
- The CLI exposes configuration installation as an explicit `omc install` command.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
23 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
16 High8 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
HighCopied Package Dependency Bridgebridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.25.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.25 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.