registry / oh-my-claude-sisyphus / 5.7.4
oh-my-claude-sisyphus@5.7.4
⚠ Under reviewMulti-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe inspected postinstall behavior is a platform-gated optional native build, and the credential-related excerpts show a Typesafe-keyed configurable request plus Anthropic usage requests to api.anthropic.com. A clean decision requires citations for 139 distinct paths, exceeding the 128-citation limit, so this review remains unresolved without a confirmed attack finding.
Static reason
One or more suspicious static signals were detected.
Trigger
The postinstall hook runs during installation; the Typesafe-backed request occurs when its runtime feature is invoked.
Impact
The inspected behavior does not establish unauthorized credential disclosure or harmful installation changes.
Mechanism
The postinstall hook attempts an optional macOS native build. The CLI feature passes its configured endpoint and API key to a request helper.
AI rationale
The inspected postinstall behavior is a platform-gated optional native build, and the credential-related excerpts show a Typesafe-keyed configurable request plus Anthropic usage requests to api.anthropic.com. A clean decision requires citations for 139 distinct paths, exceeding the 128-citation limit, so this review remains unresolved without a confirmed attack finding.
Evidence
package.jsonscripts/postinstall-contained-fs.mjsbridge/cli.cjs
Network endpoints2
api.typesafe.ai/v1/systemoneapi.anthropic.com
Decision evidence
public snapshotAI called this Manual Review at 61.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json runs a postinstall hook that invokes a native build script.
- The postinstall script skips non-macOS platforms and attempts an optional native build on macOS.
- The Typesafe-backed feature reads TYPESAFE_API_KEY and permits an OMC_JEV_ENDPOINT override.
- That feature passes its configured endpoint and key to its request helper.
- Usage checks send Anthropic credentials to api.anthropic.com.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
1 Critical17 High8 Medium6 Low
CriticalRemote Response Code Executionbridge/cli.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEvalbridge/cli.cjs
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.4.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.