registry / stickies-mcp / 0.12.0

stickies-mcp@0.12.0

A persistent sticky-note layer for Claude Code, exposed as an MCP server.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. This is a Claude Code extension with lifecycle hooks that persist explicitly formatted assistant notes. Its optional network path only posts notes to a user-configured Discord webhook; no concrete malicious chain is established.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Claude Code loads the packaged plugin hooks; `stickies init-repo` explicitly installs project-local hooks.

Impact

Assistant transcript-derived notes may persist in `~/.stickies/stickies.db` or an explicitly initialized project; opted-in notes may be copied to Discord.

Mechanism

Claude lifecycle hooks capture directives into local sticky storage with optional Discord notifications.

Rationale

Source inspection shows a real agent-extension lifecycle and transcript-derived persistence capability, but no unconsented npm lifecycle execution, arbitrary exfiltration, remote payload execution, or destructive behavior. Per policy, the extension lifecycle risk warrants a warning rather than a block.

Evidence

package.jsonhooks/hooks.jsonsrc/auto-capture.jssrc/notify.jssrc/repo-mode/install.jssrc/dashboard.js~/.stickies/stickies.db${project}/.stickies/notes.json${project}/.claude/settings.json${project}/CLAUDE.md${project}/.github/workflows/stickies-sync.yml

Network endpoints

stickies-mcp@0.12.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code