registry / oh-my-claude-sisyphus / 5.7.7
oh-my-claude-sisyphus@5.7.7
⚠ Under reviewMulti-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected install hook performs an optional platform-specific native build, and the CLI dynamic-code hint is consistent with schema validation. The unresolved source for a selected runtime dependency prevents a clean verdict, but provides no independent evidence of malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Runtime use of the package’s agent or MCP features.
Impact
The dependency’s behavior remains unverified, so a clean verdict is not supported.
Mechanism
Those features load the declared Claude Agent SDK dependency, whose source was not available for inspection.
AI rationale
The inspected install hook performs an optional platform-specific native build, and the CLI dynamic-code hint is consistent with schema validation. The unresolved source for a selected runtime dependency prevents a clean verdict, but provides no independent evidence of malicious behavior.
Decision evidence
public snapshotAI called this Manual Review at 73.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json declares @anthropic-ai/claude-agent-sdk as a runtime dependency, but its source could not be resolved in the supplied inspection evidence.
- The package imports that SDK for its MCP server and dynamically loads it for agent queries, so the unresolved dependency is relevant to runtime behavior.
Evidence against
- The postinstall hook skips non-macOS platforms and only attempts an optional native build on macOS.
- The CLI bundle’s dynamic function construction is part of schema validation, with the schema supplied to the validator.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
25 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
2 Critical17 High8 Medium6 Low
CriticalRemote Response Code Executionbridge/cli.cjs
CriticalPrevious Version Dangerous Deltadist/features/auto-update.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEvalbridge/cli.cjs
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.7.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.