runcastle@1.4.1
Burn tickets into shipped features with Claude Code.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe reported credential redirection is not present in the reviewed auth path: credentials are selected by runtime and passed to the matching agent. The default update check sends a persistent install ID, version, and platform to the vendor ping endpoint, while the README mentions update notices but does not disclose this telemetry, so this warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The app’s checkUpdate API query, used for its update banner; the ping is skipped when DO_NOT_TRACK is set.
Impact
The vendor can correlate update checks to a persistent install identifier, version, and platform. No credential redirection or project-data collection was identified.
Mechanism
The update check POSTs the install ID, package version, and platform to the ping endpoint. With DO_NOT_TRACK enabled, it checks npm for the latest version instead.
AI rationale
The reported credential redirection is not present in the reviewed auth path: credentials are selected by runtime and passed to the matching agent. The default update check sends a persistent install ID, version, and platform to the vendor ping endpoint, while the README mentions update notices but does not disclose this telemetry, so this warrants a warning.
Evidence
bin/runcastle.js<dataDir()>/install-id
Network endpoints1
ping.runcastle.dev
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The update check POST sends a persistent install ID, package version, and platform.
- The telemetry goes to https://ping.runcastle.dev/ping and is used by the app’s update check.
- Setting DO_NOT_TRACK skips the ping and checks npm for the latest version instead.
- Runtime credentials are read using the selected service’s key and passed to that agent runtime.
Evidence against
- The manifest declares a CLI binary and no lifecycle install script.
- The observed ping contains no credentials, project contents, or machine-specific details beyond platform.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggedbin/runcastle.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = runcastle@1.2.11
matchedIdentity = npm:cnVuY2FzdGxl:1.2.11
similarity = 0.600
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/runcastle.jsView on unpkg1295// src/pty/kill-tree.ts
L1296: import { spawn } from "child_process";
L1297: function taskkillTree(pid) {
High
Child Process
Package source references child process execution.
bin/runcastle.jsView on unpkg · L12951227if (/\.(cmd|bat)$/i.test(resolved)) {
L1228: return { file: process.env.ComSpec ?? "cmd.exe", args: ["/c", resolved, ...args] };
L1229: }
High
Findings
1 Critical5 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltabin/runcastle.js
HighChild Processbin/runcastle.js
HighShellbin/runcastle.js
HighSame File Env Network Executionbin/runcastle.js
HighCredential Redirect Persistenceindex.js
HighCross File Remote Execution Contextbin/runcastle.js
MediumDynamic Requirepty-host.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowWeak Cryptobin/runcastle.js
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to runcastle@1.4.1.
See all versions of runcastle for other recorded verdicts.
- Review the evidence and your use of runcastle@1.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.