registry / usrcp-extension / 0.2.3

usrcp-extension@0.2.3

Chrome browser extension for capturing claude.ai conversations into the USRCP ledger

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package installs a Claude-specific browser extension and native bridge that persist captured conversation content locally. Its interactive setup writes package-owned Chrome Native Messaging configuration.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User installs the package, then explicitly runs `usrcp setup --adapter=extension` and loads the unpacked extension in Chrome.

Impact

Claude conversation content is automatically retained in a local ledger; slash-command searches can insert scoped ledger snippets into the visible composer.

Mechanism

Claude page hook → Chrome Native Messaging → local USRCP ledger

Rationale

The package is not concretely malicious, but it creates a browser/native-host bridge that automatically captures AI-chat content and writes Chrome integration state. The `postinstall` rebuild is intrusive but source-limited to local `better-sqlite3` build artifacts and does not establish a malicious chain.

Evidence

package.jsondist/manifest.jsondist/setup.jsdist/config.jsdist/service-worker.jsdist/content-claude.jsnative-host/usrcp-bridge.cjs~/.usrcp/extension-config.json~/.usrcp/native-host/usrcp-extension-bridge.sh~/Library/Application Support/Google/Chrome/NativeMessagingHosts/com.usrcp.bridge.json

Network endpoints1

usrcp-extension@0.2.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code