runcastle@1.6.1
Burn tickets into shipped features with Claude Code.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package performs an automatic update ping that includes a persistent installation identifier, and the README does not disclose this runtime telemetry. The collected fields are limited and the ping has a DO_NOT_TRACK bypass, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
Automatically when the server starts.
Impact
The package publisher can link update checks to a persistent installation identifier and platform.
Mechanism
POSTs a persistent install ID, version, and platform to https://ping.runcastle.dev/ping; DO_NOT_TRACK bypasses the ping.
AI rationale
The package performs an automatic update ping that includes a persistent installation identifier, and the README does not disclose this runtime telemetry. The collected fields are limited and the ping has a DO_NOT_TRACK bypass, so this warrants a warning rather than a block.
Evidence
index.jsdataDir()/install-id
Network endpoints1
ping.runcastle.dev/ping
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Server startup calls the update check automatically.
- The check POSTs an install ID, package version, and platform to the package’s ping endpoint.
- The install ID is a random UUID persisted under the package data directory.
Evidence against
- The ping sends only an install ID, version, and platform; no credentials or project data appear in its request body.
- The ping can be bypassed with DO_NOT_TRACK.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggedbin/runcastle.jsView file
2164// src/workflows/burn-user.ts
L2165: import { spawnSync } from "child_process";
L2166: function runId(args) {
High
Child Process
Package source references child process execution.
bin/runcastle.jsView on unpkg · L21643082if (/\.(cmd|bat)$/i.test(resolved)) {
L3083: return { file: process.env.ComSpec ?? "cmd.exe", args: ["/c", resolved, ...args] };
L3084: }
High
193outcome: GateCommandOutcome,
L194: exitCode: z2.number().nullable(),
L195: reason: z2.string().optional(),
...
L465: purpose: SessionPurpose.optional(),
L466: purposeData: MergeBranchPair.optional(),
L467: ccSessionId: z3.string().optional(),
...
L617: }
L618: var REVIEWS_BASE = "/api/reviews", REVIEW_ARTIFACTS_ROUTE = "/:featureId", REVIEW_WALKTHROUGH_ROUTE = "/ticket/:ticketId/walkthrough.webm", REVIEW_GATE_LOG_ROUTE = "/ticket/:ticket...
L619: var init_routes = __esm(() => {
...
L850: try {
L851: const parsed = JSON.parse(trimmed);
L852: if (parsed && typeof parsed === "object")
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
Findings
7 High3 Medium5 Low
HighChild Processbin/runcastle.js
HighShellbin/runcastle.js
HighCredential Redirect Persistenceindex.js
HighCommand Output Exfiltrationbin/runcastle.js
HighObfuscated Payload Loaderbin/runcastle.js
HighCross File Remote Execution Contextbin/runcastle.js
HighSemantic Analysis Limitedbin/runcastle.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowWeak Cryptobin/runcastle.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to runcastle@1.6.1.
See all versions of runcastle for other recorded verdicts.
- Review the evidence and your use of runcastle@1.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.