ruddr@0.3.4: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

ruddr@0.3.4: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/npm[redacted]

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

4scripts.postinstall = node scripts/npm[redacted] Install-time code downloads an unverified remote native executable, stages it locally, activates an executable path, and exposes it to process execution. L4: L5: const { spawnSync } = require("node:child_process"); L6: const { ensureBinary } = require("./npm-binary.cjs"); ... L12: log(`ruddr: installed binary at ${binary}`); L13: const skill = spawnSync(binary, ["skill", "install"], { stdio: ["ignore", "pipe", "pipe"] }); L14: if (skill.error || skill.status !== 0) ... L16: else log(`ruddr: ${String(skill.stdout).trim().split("\n").join("\nruddr: ")}`); L17: const bun = spawnSync("bun", ["--version"], { stdio: "ignore" }); L18: if (bun.error || bun.status !== 0) L19: log("ruddr: Bun 1.4 or newer is required for `ruddr tui` and the Claude, O

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L4

bin/ruddr.cjsView file

5L6: const { spawnSync } = require("node:child_process"); L7: const { ensureBinary } = require("../scripts/npm-binary.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ruddr.cjsView on unpkg · L5

skill.goView file

74func defaultSkillDirectories() ([]string, error) { home, err := os.UserHomeDir() if err != nil { return nil, err } return []string{ filepath.Join(home, ".claude", "skills"), filepath.Join(home, ".agents", "skills"), }, nil } // installDelegateSkill writes the skill into <dir>/ruddr-delegate/SKILL.md, // replacing an earlier copy. It returns the written file path. func installDelegateSkill(dir string) (string, error) { skillDir := filepath.Join(dir, delegateSkillName) if err := os.MkdirAll(skillDir, 0o755); err != nil { return "", err } path := filepath.Join(skillDir, "SKILL

Medium

Ai Review Evidence

The installer creates and replaces a skill in both Claude and generic agent skill directories under the user's home directory.

skill.goView on unpkg · L74

skills/ruddr-delegate/SKILL.mdView file

121- `--sandbox workspace-write` is the safe default. Escalate to `danger-full-access` only when the task genuinely needs network or out-of-workspace access and the user's policy allows it; use `read-only` for an advisory consult where edits are unwanted (and say so in the brief).

Medium

Ai Review Evidence

The installed skill directs coding agents to launch Ruddr-managed sessions, including options for broad filesystem and network access.

skills/ruddr-delegate/SKILL.mdView on unpkg · L121

Source & flagged code

5 flagged

package.jsonView file

Lines 1-24json

1{

2 "name": "ruddr",

3 "version": "0.3.4",

4 "description": "Thin control plane for Codex, Claude Code, OpenCode, and Pi agent sessions: run, steer, observe, and a live TUI with diffs.",

5 "license": "MIT",

6 "type": "module",

7 "bin": {

8 "ruddr": "bin/ruddr.cjs",

9 "rudder": "bin/ruddr.cjs"

10 },

11 "files": [

12 "bin/",

13 "scripts/npm-binary.cjs",

14 "scripts/npm-postinstall.cjs",

15 "tui/",

16 "adapter/",

17 "claude/",

18 "opencode/",

High

Unverified Remote Native Payload Install

Install-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.

package.jsonView on unpkg · L4

19 "pi/",

20 "skills/",

21 "*.go",

22 "go.mod",

23 "go.sum",

24 "checksums.json",

Lines 38-69json

38 ],

39 "repository": {

40 "type": "git",

41 "url": "git+https://github.com/safzanpirani/ruddr.git"

42 },

43 "homepage": "https://github.com/safzanpirani/ruddr#readme",

44 "bugs": {

45

bin/ruddr.cjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2// npm launcher: runs the native Ruddr binary that lives beside the TUI and

3// adapter sources in this package, so the binary's sibling lookup finds them.

4"use strict";

5

6const { spawnSync } = require("node:child_process");

7const { ensureBinary }

skill.goView file

Lines 54-94text

54 targets, err = defaultSkillDirectories()

55 if err != nil {

56 return err

57 }

58 }

59 var failures []string

60 for _, dir := range targets {

61 path, err := installDelegateSkill(dir)

62 if err != nil {

63 failures = append(failures, fmt.Sprintf("%s: %v", dir, err))

64 continue

65 }

66 fmt.Printf("installed %s\n", path)

67

skills/ruddr-delegate/SKILL.mdView file

Lines 101-141markdown

101> status`. Make sure `.scratch/` is ignored (`git check-ignore .scratch` or

102> add it to `.git/info/exclude`), or put the state dir outside the repo, and

103> name the paths in the brief as off-limits.

104

105```bash

106ruddr run \

107 --provider codex --model gpt-5.6-sol --effort medium \