registry / yana-ai / 0.43.1

yana-ai@0.43.1

Audits your AI coding agent setup before it can damage your repo. 55 hooks · 1989 skills · 101 agents · Claude Code + Codex compatible.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. The package automatically mutates a consuming project's Claude/AI-agent control surface during npm postinstall. This is unconsented lifecycle installation of hooks, commands, agents, rules, and plugin metadata into project .claude paths.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of yana-ai@0.43.1 with lifecycle scripts enabled

Impact

Claude Code or related agent sessions in the project may execute package-supplied hooks and instructions after install, changing agent behavior without an explicit setup command.

Mechanism

postinstall copies package-supplied AI-agent hook/control files into target project

Policy narrative

On install, npm runs the package postinstall script with --auto. The installer resolves the target from INIT_CWD or cwd, then recursively copies package-owned hooks, commands, agents, rules, scripts, and gates into the consuming project's .claude directories plus .claude-plugin metadata. The shipped hook manifest wires Claude hook events to those package-supplied shell commands, creating an automatic AI-agent control-surface mutation at install time.

Rationale

Source inspection confirms unconsented npm postinstall mutation of a broad Claude/AI-agent control surface, which meets the firewall block policy even without observed exfiltration. The behavior is package-aligned safety tooling, but it is activated by lifecycle install rather than an explicit user setup command. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonscripts/npm-install.js.claude-plugin/hooks/hooks.jsoncore/hooks/telemetry-sender.shscripts/yana-rt-wrapper.js.claude/hooks/*.claude/commands/*.claude/agents/*.claude/rules/*.claude/scripts/*.claude/gates/*.claude-plugin/plugin.json.claude-plugin/marketplace.json

Decision evidence

public snapshot

AI called this Malicious at 93.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for policy block

package.json defines postinstall: node scripts/npm-install.js --auto
scripts/npm-install.js uses INIT_CWD/process.cwd as TARGET project root
postinstall copies core/hooks, commands, agents, rules, scripts, gates into TARGET .claude/*
postinstall also writes .claude-plugin/plugin.json and marketplace.json
copied .claude-plugin/hooks/hooks.json wires Claude hooks to package shell commands

Evidence against

No credential harvesting or external exfiltration found in inspected install script
core/hooks/telemetry-sender.sh writes local .claude/state/telemetry.jsonl only
scripts/yana-rt-wrapper.js only execFileSyncs explicit/system/package runtime candidates
No large hidden binary payloads found by size scan

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 66.8 KB of source

Source & flagged code

25 flagged

package.jsonView file

Lines 36-72json

36 "yana-rt": "./scripts/yana-rt-wrapper.js"

37 },

38 "files": [

39 "scripts/npm-install.js",

40 "scripts/yana-rt-wrapper.js",

41 "core/hooks/",

42 "core/commands/",

43 "core/agents/",

44 "core/rules/",

45 "core/scripts/",

46 "core/gates/",

47 "scanner/",

48 "gates/",

49 ".claude-plugin/",

50 "bin/yana",

51 "README.md",

52 "CHANGELOG.md"

53 ],

54 "scripts": {

55 "test": "bash core/tests/hooks/run-hook-tests.sh",

56 "postinstall": "node scripts/npm-install.js --auto",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L56

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L56

57 "deploy": "wrangler deploy",

58 "preview": "wrangler dev",

59 "electron:dev": "cd tools/yana-desktop && npm start",

60 "electron:build": "cd tools/yana-desktop && npm run build:linux && npm run build:mac && npm run build:win",

61 "electron:build:mac": "cd tools/yana-desktop && npm run build:mac",

62 "electron:build:win": "cd tools/yana-desktop && npm run build:win",

63 "electron:install": "cd tools/yana-desktop && npm install"

64 },

65 "devDependencies": {

66 "wrangler": "^4.96.0"

67 },

68 "dependencies": {

69 "acorn": "^8.14.0"

70 }

71}

core/hooks/gitnexus-hook.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * GitNexus Claude Code Plugin Hook

4 *

5 * PreToolUse — intercepts Grep/Glob/Bash searches and augments

6 * with graph context from the GitNexus index.

7 * PostToolUse — detects stale index after git mutations and notifies

8 * the agent to reindex.

9 *

10 * NOTE: SessionStart hooks are broken on Windows (Claude Code bug #23576).

11 * Session context is injected via CLAUDE.md / skills instead.

12 */

14const fs = require('fs');

15const path = require('path');

16const { spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

core/hooks/gitnexus-hook.jsView on unpkg · L15

18/**

19 * Read JSON input from stdin synchronously.

20 */

21function readInput() {

22 try {

23 const data = fs.readFileSync(0, 'utf-8');

24 return JSON.parse(data);

25 } catch {

26 return {};

27 }

28}

30/**

31 * Find the .gitnexus directory by walking up from startDir.

32 * Returns the path to .gitnexus/ or null if not found.

33 */

34function findGitNexusDir(startDir) {

35 let dir = startDir || process.cwd();

Lines 107-147javascript

107 *

108 * SECURITY: Never use shell: true with user-controlled arguments.

109 * On Windows, invoke gitnexus.cmd directly (no shell needed).

110 */

111function runGitNexusCli(args, cwd, timeout) {

112 const isWin = process.platform === 'win32';

113

114 // Detect whether 'gitnexus' is on PATH (cheap check, no execution)

115 let useDirectBinary = false;

116 try {

117 const which = spawnSync(isWin ? 'where' : 'which', ['gitnexus'], {

118 encoding: 'utf-8',

119 timeout: 3000,

120 stdio: ['pipe', 'pipe', 'pipe'],

121 });

122 useDirectBinary = which.status === 0;

123 } catch {

124 /* not on PATH */

125 }

126

127 if (useDirectBinary) {

128 return spawnSync(isWin ? 'gitnexus.cmd' : 'gitnexus', args, {

129 encoding: 'utf-8',

130 timeout,

131 cwd,

132 stdio: ['pipe', 'pipe', 'pipe'],

133 });

134 }

135 // npx fallback needs shell on Windows since npx is a .cmd script

136 return spawnSync(isWin ? 'npx.cmd' : 'npx', ['-y', 'gitnexus', ...args], {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

core/hooks/gitnexus-hook.jsView on unpkg · L127

137 encoding: 'utf-8',

138 timeout: timeout + 5000,

139 cwd,

140 stdio: ['pipe', 'pipe', 'pipe'],

141 });

142}

143

144/**

145 * Emit a hook response with additional context for the agent.

146 */

147function sendHookResponse(hookEventName, message) {

core/gates/structured-output-validator.jsView file

Lines 1-27javascript

1/**

2 * Yana AI Structured Output Validator

3 * Version: 1.8.0

4 * Purpose: Enforces that Agent responses follow the Yana AI structural requirements

5 * (Intent, Rationale, Evidence) and comply with OWASP LLM02.

6 */

8const fs = require('fs');

9const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/gates/structured-output-validator.jsView on unpkg · L7

11const REQUIRED_SECTIONS = ['Intent', 'Rationale', 'Evidence'];

13function validateOutput(content) {

14 const findings = [];

16 // 1. Check for required Yana AI sections

17 REQUIRED_SECTIONS.forEach(section => {

18 const regex = new RegExp(`^#*\\s*${section}:?`, 'mi');

19 if (!regex.test(content)) {

20 findings.push({

21 level: 'ERROR',

22 message: `Missing required section: ${section}`,

23 suggestion: `Ensure your response includes a section clearly labeled "${section}".`

24 });

25 }

26 });

scripts/npm-install.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/**

3 * yana-ai npm installer

4 * Copies plugin files to .claude/ in the current project.

5 * Run: npx yana-ai OR yarn yana-ai

6 */

8const fs = require("fs");

9const path = require("path");

11const PKG_ROOT = path.join(__dirname, "..");

12const AUTO_MODE = process.argv.includes("--auto");

13const TARGET = process.env.INIT_CWD || process.cwd(); // project root

15const COPY_DIRS = [

16 ["core/hooks", ".claude/hooks"],

17 ["core/commands", ".claude/commands"],

18 ["core/agents", ".claude/agents"],

19 ["core/rules", ".claude/rules"],

20 // ── core/scripts + core/gates ──────────────────────────────────────────────

21 // FIX (audit 2026-06-21): these two were missing from COPY_DIRS even though

22 // they're listed in package.json "files" (so they DO ship inside the npm

23 // tarball) — they just never landed in the target project's .claude/.

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/npm-install.jsView on unpkg · L3

core/gates/identity-gate.shView file

•path = core/gates/identity-gate.sh kind = build_helper sizeBytes = 10457 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

core/gates/identity-gate.shView on unpkg

.claude-plugin/hooks/yana-audit-rewake.shView file

•path = .claude-plugin/hooks/yana-audit-rewake.sh kind = payload_in_excluded_dir sizeBytes = 1696 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude-plugin/hooks/yana-audit-rewake.shView on unpkg

core/agents/test-engineer.mdView file

Lines 96-175markdown

96 create: jest.fn(),

97 update: jest.fn()

98 }

99 };

100 mockEmailService = {

101 sendWelcomeEmail: jest.fn(),

102 sendPasswordReset: jest.fn()

103 };

104 userService = new UserService(mockDatabase, mockEmailService);

105 });

106

107 afterEach(() => {

108 jest.clearAllMocks();

109 });

110

111 describe('createUser', () => {

112 it('should create a new user successfully', async () => {

113 // Arrange

114 const userData = {

115 email: 'test@example.com',

116 password: 'SecurePass123!',

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L116

117 name: 'Test User'

118 };

119 const hashedPassword = 'hashedPassword123';

120 const newUser = { id: '123', ...userData, password: hashedPassword };

121

122 mockDatabase.users.findOne.mockResolvedValue(null);

123 mockDatabase.users.create.mockResolvedValue(newUser);

124 mockEmailService.sendWelcomeEmail.mockResolvedValue(true);

125

126 // Act

127 const result = await userService.createUser(userData);

128

129 // Assert

130 expect(mockDatabase.users.findOne).toHaveBeenCalledWith({ email: userData.email });

131 expect(mockDatabase.users.create).toHaveBeenCalledWith(

132 expect.objectContaining({

133 email: userData.email,

134 name: userData.name,

135 password: expect.not.stringContaining(userData.password)

136 })

137 );

138 expect(mockEmailService.sendWelcomeEmail).toHaveBeenCalledWith(userData.email, userData.name);

139 expect(result).toEqual(expect.objectContaining({

140 id: '123',

141 email: userData.email,

142 name: userData.name

143 }));

144 expect(result.password).toBeUndefined();

145 });

146

147 it('should throw error if user already exists', async () => {

148 // Arrange

149 const existingUser = { id: '123', email: 'existing@example.com' };

150 mockDatabase.users.findOne.mockResolvedValue(existingUser);

151

152 // Act & Assert

153 await expect(userService.createUser({

154 email: 'existing@example.com',

155 password: 'password123'

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L155

156 })).rejects.toThrow('User already exists');

157

158 expect(mockDatabase.users.create).not.toHaveBeenCalled();

159 expect(mockEmailService.sendWelcomeEmail).not.toHaveBeenCalled();

160 });

161

162 // Edge Cases

163 it('should handle database errors gracefully', async () => {

164 mockDatabase.users.findOne.mockRejectedValue(new Error('Database connection failed'));

165

166 await expect(userService.createUser({

167 email: 'test@example.com',

168 password: 'password123'

169 })).rejects.toThrow('Database connection failed');

170 });

171

172 // Input Validation Tests

173 it.each([

174 { email: '', password: 'valid123', error: 'Email is required' },

175 { email: 'invalid-email', password: 'valid123', error: 'Invalid email format' },

168patternName = generic_password severity = medium line = 168 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L168

174patternName = generic_password severity = medium line = 174 matchedText = { email:...' },

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L174

175patternName = generic_password severity = medium line = 175 matchedText = { email:...' },

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L175

188patternName = generic_password severity = medium line = 188 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L188

core/commands/api-scaffold.mdView file

1540patternName = generic_password severity = medium line = 1540 matchedText = test_pas...123"

Medium

Secret Pattern

Hardcoded password in core/commands/api-scaffold.md

core/commands/api-scaffold.mdView on unpkg · L1540

core/commands/test-harness.mdView file

1197patternName = generic_password severity = medium line = 1197 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1197

1235patternName = generic_password severity = medium line = 1235 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1235

1251patternName = generic_password severity = medium line = 1251 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1251

1277patternName = generic_password severity = medium line = 1277 matchedText = const pa...23';

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1277

1298patternName = generic_password severity = medium line = 1298 matchedText = const pa...rd';

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1298

core/commands/db-migrate.mdView file

1401patternName = generic_password severity = medium line = 1401 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/db-migrate.md

core/commands/db-migrate.mdView on unpkg · L1401

1411patternName = generic_password severity = medium line = 1411 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/db-migrate.md

core/commands/db-migrate.mdView on unpkg · L1411

core/commands/config-validate.mdView file

688patternName = generic_password severity = medium line = 688 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L688

701patternName = generic_password severity = medium line = 701 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L701

715patternName = generic_password severity = medium line = 715 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L715

Source & flagged code

25 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/npm-install.js --auto

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/npm-install.js --auto

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

core/hooks/gitnexus-hook.jsView file

15const path = require('path'); L16: const { spawnSync } = require('child_process'); L17:

High

Child Process

Package source references child process execution.

core/hooks/gitnexus-hook.jsView on unpkg · L15

127if (useDirectBinary) { L128: return spawnSync(isWin ? 'gitnexus.cmd' : 'gitnexus', args, { L129: encoding: 'utf-8', ... L134: } L135: // npx fallback needs shell on Windows since npx is a .cmd script L136: return spawnSync(isWin ? 'npx.cmd' : 'npx', ['-y', 'gitnexus', ...args], {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

core/hooks/gitnexus-hook.jsView on unpkg · L127

core/gates/structured-output-validator.jsView file

7L8: const fs = require('fs'); L9: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/gates/structured-output-validator.jsView on unpkg · L7

scripts/npm-install.jsView file

3Install-time AI-agent control hijack evidence: L3: * yana-ai npm installer L4: * Copies plugin files to .claude/ in the current project. L5: * Run: npx yana-ai OR yarn yana-ai ... L15: const COPY_DIRS = [ L16: ["core/hooks", ".claude/hooks"], L17: ["core/commands", ".claude/commands"], L18: ["core/agents", ".claude/agents"], L19: ["core/rules", ".claude/rules"], L20: // ── core/scripts + core/gates ────────────────────────────────────────────── ... L22: // they're listed in package.json "files" (so they DO ship inside the npm L23: // tarball) — they just never landed in the target project's .claude/. L24: // Several installed hooks reference them by relative path: Payload evidence from core/hooks/agent-pixel-notify.sh: L15: EVENT="${1:-start}" L16: BRIDGE_URL="${YANA_PIXEL_BRIDGE_URL:-http://127.0.0.1:5000}/webhook/agent-hook" L17:

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/npm-install.jsView on unpkg · L3

core/gates/identity-gate.shView file

•path = core/gates/identity-gate.sh kind = build_helper sizeBytes = 10457 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

core/gates/identity-gate.shView on unpkg

.claude-plugin/hooks/yana-audit-rewake.shView file

•path = .claude-plugin/hooks/yana-audit-rewake.sh kind = payload_in_excluded_dir sizeBytes = 1696 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude-plugin/hooks/yana-audit-rewake.shView on unpkg

core/agents/test-engineer.mdView file

116patternName = generic_password severity = medium line = 116 matchedText = password...3!',

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L116

155patternName = generic_password severity = medium line = 155 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L155

168patternName = generic_password severity = medium line = 168 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L168

174patternName = generic_password severity = medium line = 174 matchedText = { email:...' },

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L174

175patternName = generic_password severity = medium line = 175 matchedText = { email:...' },

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L175

188patternName = generic_password severity = medium line = 188 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L188

core/commands/api-scaffold.mdView file

1540patternName = generic_password severity = medium line = 1540 matchedText = test_pas...123"

Medium

Secret Pattern

Hardcoded password in core/commands/api-scaffold.md

core/commands/api-scaffold.mdView on unpkg · L1540

core/commands/test-harness.mdView file

1197patternName = generic_password severity = medium line = 1197 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1197

1235patternName = generic_password severity = medium line = 1235 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1235

1251patternName = generic_password severity = medium line = 1251 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1251

1277patternName = generic_password severity = medium line = 1277 matchedText = const pa...23';

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1277

1298patternName = generic_password severity = medium line = 1298 matchedText = const pa...rd';

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1298

core/commands/db-migrate.mdView file

1401patternName = generic_password severity = medium line = 1401 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/db-migrate.md

core/commands/db-migrate.mdView on unpkg · L1401

1411patternName = generic_password severity = medium line = 1411 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/db-migrate.md

core/commands/db-migrate.mdView on unpkg · L1411

core/commands/config-validate.mdView file

688patternName = generic_password severity = medium line = 688 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L688

701patternName = generic_password severity = medium line = 701 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L701

715patternName = generic_password severity = medium line = 715 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L715

Findings

1 Critical4 High22 Medium3 Low

CriticalAi Agent Control Hijackscripts/npm-install.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processcore/hooks/gitnexus-hook.js

HighRuntime Package Installcore/hooks/gitnexus-hook.js

HighPayload In Excluded Dir.claude-plugin/hooks/yana-audit-rewake.sh

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirecore/gates/structured-output-validator.js

MediumEnvironment Vars

MediumShips Build Helpercore/gates/identity-gate.sh

MediumStructural Risk Force Deep Review

MediumSecret Patterncore/agents/test-engineer.md

MediumSecret Patterncore/commands/api-scaffold.md

MediumSecret Patterncore/commands/test-harness.md

MediumSecret Patterncore/commands/db-migrate.md

MediumSecret Patterncore/commands/config-validate.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

25 flagged

package.jsonView file

Lines 36-72json

36 "yana-rt": "./scripts/yana-rt-wrapper.js"

37 },

38 "files": [

39 "scripts/npm-install.js",

40 "scripts/yana-rt-wrapper.js",

41 "core/hooks/",

42 "core/commands/",

43 "core/agents/",

44 "core/rules/",

45 "core/scripts/",

46 "core/gates/",

47 "scanner/",

48 "gates/",

49 ".claude-plugin/",

50 "bin/yana",

51 "README.md",

52 "CHANGELOG.md"

53 ],

54 "scripts": {

55 "test": "bash core/tests/hooks/run-hook-tests.sh",

56 "postinstall": "node scripts/npm-install.js --auto",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L56

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L56

57 "deploy": "wrangler deploy",

58 "preview": "wrangler dev",

59 "electron:dev": "cd tools/yana-desktop && npm start",

60 "electron:build": "cd tools/yana-desktop && npm run build:linux && npm run build:mac && npm run build:win",

61 "electron:build:mac": "cd tools/yana-desktop && npm run build:mac",

62 "electron:build:win": "cd tools/yana-desktop && npm run build:win",

63 "electron:install": "cd tools/yana-desktop && npm install"

64 },

65 "devDependencies": {

66 "wrangler": "^4.96.0"

67 },

68 "dependencies": {

69 "acorn": "^8.14.0"

70 }

71}

core/hooks/gitnexus-hook.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * GitNexus Claude Code Plugin Hook

4 *

5 * PreToolUse — intercepts Grep/Glob/Bash searches and augments

6 * with graph context from the GitNexus index.

7 * PostToolUse — detects stale index after git mutations and notifies

8 * the agent to reindex.

9 *

10 * NOTE: SessionStart hooks are broken on Windows (Claude Code bug #23576).

11 * Session context is injected via CLAUDE.md / skills instead.

12 */

14const fs = require('fs');

15const path = require('path');

16const { spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

core/hooks/gitnexus-hook.jsView on unpkg · L15

18/**

19 * Read JSON input from stdin synchronously.

20 */

21function readInput() {

22 try {

23 const data = fs.readFileSync(0, 'utf-8');

24 return JSON.parse(data);

25 } catch {

26 return {};

27 }

28}

30/**

31 * Find the .gitnexus directory by walking up from startDir.

32 * Returns the path to .gitnexus/ or null if not found.

33 */

34function findGitNexusDir(startDir) {

35 let dir = startDir || process.cwd();

Lines 107-147javascript

107 *

108 * SECURITY: Never use shell: true with user-controlled arguments.

109 * On Windows, invoke gitnexus.cmd directly (no shell needed).

110 */

111function runGitNexusCli(args, cwd, timeout) {

112 const isWin = process.platform === 'win32';

113

114 // Detect whether 'gitnexus' is on PATH (cheap check, no execution)

115 let useDirectBinary = false;

116 try {

117 const which = spawnSync(isWin ? 'where' : 'which', ['gitnexus'], {

118 encoding: 'utf-8',

119 timeout: 3000,

120 stdio: ['pipe', 'pipe', 'pipe'],

121 });

122 useDirectBinary = which.status === 0;

123 } catch {

124 /* not on PATH */

125 }

126

127 if (useDirectBinary) {

128 return spawnSync(isWin ? 'gitnexus.cmd' : 'gitnexus', args, {

129 encoding: 'utf-8',

130 timeout,

131 cwd,

132 stdio: ['pipe', 'pipe', 'pipe'],

133 });

134 }

135 // npx fallback needs shell on Windows since npx is a .cmd script

136 return spawnSync(isWin ? 'npx.cmd' : 'npx', ['-y', 'gitnexus', ...args], {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

core/hooks/gitnexus-hook.jsView on unpkg · L127

137 encoding: 'utf-8',

138 timeout: timeout + 5000,

139 cwd,

140 stdio: ['pipe', 'pipe', 'pipe'],

141 });

142}

143

144/**

145 * Emit a hook response with additional context for the agent.

146 */

147function sendHookResponse(hookEventName, message) {

core/gates/structured-output-validator.jsView file

Lines 1-27javascript

1/**

2 * Yana AI Structured Output Validator

3 * Version: 1.8.0

4 * Purpose: Enforces that Agent responses follow the Yana AI structural requirements

5 * (Intent, Rationale, Evidence) and comply with OWASP LLM02.

6 */

8const fs = require('fs');

9const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/gates/structured-output-validator.jsView on unpkg · L7

11const REQUIRED_SECTIONS = ['Intent', 'Rationale', 'Evidence'];

13function validateOutput(content) {

14 const findings = [];

16 // 1. Check for required Yana AI sections

17 REQUIRED_SECTIONS.forEach(section => {

18 const regex = new RegExp(`^#*\\s*${section}:?`, 'mi');

19 if (!regex.test(content)) {

20 findings.push({

21 level: 'ERROR',

22 message: `Missing required section: ${section}`,

23 suggestion: `Ensure your response includes a section clearly labeled "${section}".`

24 });

25 }

26 });

scripts/npm-install.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/**

3 * yana-ai npm installer

4 * Copies plugin files to .claude/ in the current project.

5 * Run: npx yana-ai OR yarn yana-ai

6 */

8const fs = require("fs");

9const path = require("path");

11const PKG_ROOT = path.join(__dirname, "..");

12const AUTO_MODE = process.argv.includes("--auto");

13const TARGET = process.env.INIT_CWD || process.cwd(); // project root

15const COPY_DIRS = [

16 ["core/hooks", ".claude/hooks"],

17 ["core/commands", ".claude/commands"],

18 ["core/agents", ".claude/agents"],

19 ["core/rules", ".claude/rules"],

20 // ── core/scripts + core/gates ──────────────────────────────────────────────

21 // FIX (audit 2026-06-21): these two were missing from COPY_DIRS even though

22 // they're listed in package.json "files" (so they DO ship inside the npm

23 // tarball) — they just never landed in the target project's .claude/.

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/npm-install.jsView on unpkg · L3

core/gates/identity-gate.shView file

•path = core/gates/identity-gate.sh kind = build_helper sizeBytes = 10457 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

core/gates/identity-gate.shView on unpkg

.claude-plugin/hooks/yana-audit-rewake.shView file

•path = .claude-plugin/hooks/yana-audit-rewake.sh kind = payload_in_excluded_dir sizeBytes = 1696 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude-plugin/hooks/yana-audit-rewake.shView on unpkg

core/agents/test-engineer.mdView file

Lines 96-175markdown

96 create: jest.fn(),

97 update: jest.fn()

98 }

99 };

100 mockEmailService = {

101 sendWelcomeEmail: jest.fn(),

102 sendPasswordReset: jest.fn()

103 };

104 userService = new UserService(mockDatabase, mockEmailService);

105 });

106

107 afterEach(() => {

108 jest.clearAllMocks();

109 });

110

111 describe('createUser', () => {

112 it('should create a new user successfully', async () => {

113 // Arrange

114 const userData = {

115 email: 'test@example.com',

116 password: 'SecurePass123!',

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L116

117 name: 'Test User'

118 };

119 const hashedPassword = 'hashedPassword123';

120 const newUser = { id: '123', ...userData, password: hashedPassword };

121

122 mockDatabase.users.findOne.mockResolvedValue(null);

123 mockDatabase.users.create.mockResolvedValue(newUser);

124 mockEmailService.sendWelcomeEmail.mockResolvedValue(true);

125

126 // Act

127 const result = await userService.createUser(userData);

128

129 // Assert

130 expect(mockDatabase.users.findOne).toHaveBeenCalledWith({ email: userData.email });

131 expect(mockDatabase.users.create).toHaveBeenCalledWith(

132 expect.objectContaining({

133 email: userData.email,

134 name: userData.name,

135 password: expect.not.stringContaining(userData.password)

136 })

137 );

138 expect(mockEmailService.sendWelcomeEmail).toHaveBeenCalledWith(userData.email, userData.name);

139 expect(result).toEqual(expect.objectContaining({

140 id: '123',

141 email: userData.email,

142 name: userData.name

143 }));

144 expect(result.password).toBeUndefined();

145 });

146

147 it('should throw error if user already exists', async () => {

148 // Arrange

149 const existingUser = { id: '123', email: 'existing@example.com' };

150 mockDatabase.users.findOne.mockResolvedValue(existingUser);

151

152 // Act & Assert

153 await expect(userService.createUser({

154 email: 'existing@example.com',

155 password: 'password123'

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L155

156 })).rejects.toThrow('User already exists');

157

158 expect(mockDatabase.users.create).not.toHaveBeenCalled();

159 expect(mockEmailService.sendWelcomeEmail).not.toHaveBeenCalled();

160 });

161

162 // Edge Cases

163 it('should handle database errors gracefully', async () => {

164 mockDatabase.users.findOne.mockRejectedValue(new Error('Database connection failed'));

165

166 await expect(userService.createUser({

167 email: 'test@example.com',

168 password: 'password123'

169 })).rejects.toThrow('Database connection failed');

170 });

171

172 // Input Validation Tests

173 it.each([

174 { email: '', password: 'valid123', error: 'Email is required' },

175 { email: 'invalid-email', password: 'valid123', error: 'Invalid email format' },

168patternName = generic_password severity = medium line = 168 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L168

174patternName = generic_password severity = medium line = 174 matchedText = { email:...' },

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L174

175patternName = generic_password severity = medium line = 175 matchedText = { email:...' },

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L175

188patternName = generic_password severity = medium line = 188 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/agents/test-engineer.md

core/agents/test-engineer.mdView on unpkg · L188

core/commands/api-scaffold.mdView file

1540patternName = generic_password severity = medium line = 1540 matchedText = test_pas...123"

Medium

Secret Pattern

Hardcoded password in core/commands/api-scaffold.md

core/commands/api-scaffold.mdView on unpkg · L1540

core/commands/test-harness.mdView file

1197patternName = generic_password severity = medium line = 1197 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1197

1235patternName = generic_password severity = medium line = 1235 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1235

1251patternName = generic_password severity = medium line = 1251 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1251

1277patternName = generic_password severity = medium line = 1277 matchedText = const pa...23';

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1277

1298patternName = generic_password severity = medium line = 1298 matchedText = const pa...rd';

Medium

Secret Pattern

Hardcoded password in core/commands/test-harness.md

core/commands/test-harness.mdView on unpkg · L1298

core/commands/db-migrate.mdView file

1401patternName = generic_password severity = medium line = 1401 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/db-migrate.md

core/commands/db-migrate.mdView on unpkg · L1401

1411patternName = generic_password severity = medium line = 1411 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in core/commands/db-migrate.md

core/commands/db-migrate.mdView on unpkg · L1411

core/commands/config-validate.mdView file

688patternName = generic_password severity = medium line = 688 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L688

701patternName = generic_password severity = medium line = 701 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L701

715patternName = generic_password severity = medium line = 715 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in core/commands/config-validate.md

core/commands/config-validate.mdView on unpkg · L715