registry / oh-my-claude-sisyphus / 5.7.27
oh-my-claude-sisyphus@5.7.27
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe install hook only attempts an optional macOS native build. The external Jev request path is disabled unless the user supplies a service key and configures points; inspected runtime and worker-launch behavior matches the package’s stated purpose.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The postinstall hook may build an optional native addon on macOS; Jev requests require explicit environment configuration.
Impact
No unauthorized credential collection, install-time data transfer, or unrelated execution was identified in the inspected paths.
Mechanism
The hook invokes the package’s native build script. Jev sends bounded state and questions to its configured service when enabled.
AI rationale
The install hook only attempts an optional macOS native build. The external Jev request path is disabled unless the user supplies a service key and configures points; inspected runtime and worker-launch behavior matches the package’s stated purpose.
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook skips development installs and non-macOS platforms, and only attempts an optional native build when the binary is absent.
- Jev requires both a TYPESAFE_API_KEY and explicit OMC_JEV point configuration before making requests; it can be disabled with OMC_JEV=off.
- Jev sends bounded state and questions to its configured endpoint, defaulting to api.typesafe.ai; the endpoint and credentials are configurable through environment variables.
- The worker activation gate waits for runtime authorization before starting a provider and states that it does not write credentials.
Evidence against
- The manifest includes a postinstall hook, but its source shows only an optional platform-specific native build.
- The CLI bundle contains process execution and agent configuration code consistent with the package’s orchestration and installation functions.
- The Jev integration can transmit state to an external service, but its request path is gated by explicit environment configuration.
Behavioral surface
ChildProcess
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
1 Critical16 High8 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/team/worker-activation-gate.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.27.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.