registry / oh-my-claude-sisyphus / 5.7.29
oh-my-claude-sisyphus@5.7.29
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe postinstall hook only attempts a local optional native build on macOS. The reviewed network feature requires a separate service key and explicit point configuration, and I found no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The optional Jev network feature requires its API key and configured OMC_JEV point selection; postinstall’s native build is limited to macOS when the addon is absent.
Impact
No unauthorized credential forwarding or unrelated install-time activity was identified.
Mechanism
Jev sends bounded state and questions to its configured endpoint using TYPESAFE_API_KEY. The postinstall hook runs a local build script for the optional native addon.
AI rationale
The postinstall hook only attempts a local optional native build on macOS. The reviewed network feature requires a separate service key and explicit point configuration, and I found no concrete attack behavior.
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook skips non-macOS platforms and only attempts to build the package’s optional native addon locally.
- The Jev request feature requires a TYPESAFE_API_KEY and explicit OMC_JEV point selection; it is off when those are absent.
- Jev sends its configured request to api.typesafe.ai using the separately named TYPESAFE_API_KEY.
Evidence against
- The CLI includes network and shell execution capabilities, but the inspected paths serve configurable product features and do not show automatic unrelated collection.
- No install-time network request or unrelated credential forwarding was identified in the inspected lifecycle and CLI paths.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
1 Critical16 High8 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/team/model-contract.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.29.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.