registry / stickies-mcp / 0.11.0

stickies-mcp@0.11.0

A persistent sticky-note layer for Claude Code, exposed as an MCP server.

AI Security Review

scanned 22h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. An explicit repo-mode setup installs Claude Code SessionStart and Stop hooks in a selected project. Those hooks inject stored notes and read assistant transcript content to persist tagged directives; optional sync can push notes or mirror them to Discord.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `stickies init-repo`, then Claude Code executes the installed project hooks.

Impact

Project agent configuration and note files are modified; configured remotes or Discord can receive persisted note content.

Mechanism

First-party Claude hook installation with transcript-derived note persistence and opt-in sync.

Rationale

Source does not show malware, stealth execution, broad agent-control mutation, or default exfiltration. It does implement an explicit-user-command agent extension lifecycle with transcript handling and opt-in outbound synchronization, so warn rather than block.

Evidence

package.jsonsrc/cli.jssrc/repo-mode/install.jssrc/auto-capture.jssrc/repo-mode/engine.mjssrc/notify.jshooks/hooks.json.claude/settings.json.stickies/engine.mjs.stickies/notes.json.stickies/NOTES.md.github/workflows/stickies-sync.ymlCLAUDE.md

Network endpoints

stickies-mcp@0.11.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code