chainoftrust.dev · install-time trust report REV 51d2e8c · PINNED · RECOMPUTABLE

WarningsInspected 2026-09-06 · recomputable

kunchenguid/firstmate

github.com/kunchenguid/firstmate at 51d2e8c902bb8785093969f8ba738c7355a283e0 · examined 2026-09-06 12:07 UTCServed from cache

The chain of trust: breaks at agent config · amber holds a warning · dashed was not established

Installing this repository would give an AI coding agent three hook manifests, 21 skill definitions, and 20 harness extensions that activate automatically when the agent indexes a cloned working tree. The hooks run on PreToolUse, SessionStart, and Stop events, and the manifest executes commands without user invocation. One command is quoted verbatim from the settings file, checking whether the repository exists in the working directory. The repository was pushed one day before the analysed commit, and it contains files that cannot be reviewed by reading alone. One of those files is binary or generated, comprising 1 of 506 files at 19% of the repository by size.

Summary by deepseek-ai/DeepSeek-V4-Flash-0731-TEE, over the findings below only

Annotations: 10 findings, 9 distinct concerns

WARNING · agent-config / Claude Code hook manifest

The repository ships 3 Claude Code hook manifests. A harness that indexes a cloned working tree can pick these up without any install step being run.

.claude/settings.json, .codex/hooks.json, .cursor/hooks.json

WARNING · agent-config / agent skill definition

The repository ships 21 agent skill definitions. A harness that indexes a cloned working tree can pick these up without any install step being run.

.agents/skills/afk/SKILL.md, .agents/skills/ahoy/SKILL.md, .agents/skills/ask-user-authority/SKILL.md, and 18 more

WARNING · agent-config / harness extension

The repository ships 20 harness extensions. A harness that indexes a cloned working tree can pick these up without any install step being run.

.opencode/plugins/fm-primary-cd-check.js, .opencode/plugins/fm-primary-pretool-check.js, .opencode/plugins/fm-primary-sessionstart-nudge.js, and 17 more

WARNING · agent-config / hooks

The hook manifest registers 3 lifecycle hooks: PreToolUse, SessionStart, Stop. Hooks run when their event fires, without the user invoking anything by name.

.claude/settings.json, .codex/hooks.json

NOTE · agent-config / agent instruction file

The repository ships 2 agent instruction files. A harness that indexes a cloned working tree can pick these up without any install step being run.

AGENTS.md, CLAUDE.md

NOTE · agent-config / hook-commands

The hook manifest runs 6 commands. The first is quoted verbatim.

[ -z \

.claude/settings.json

NOTE · agent-config / hook-commands

The hook manifest runs 4 commands. The first is quoted verbatim.

bash -lc 'payload=$(cat 2>/dev/null || true); [ -n \

.codex/hooks.json

CLEAN · unauditable-surface / census

19% of the repository by size (1 of 506 files) is binary or generated and cannot be reviewed by reading.

file listing at the analysed commit

CLEAN · trust-root / activity

The last push was 0 days ago (2026-09-06).

GitHub repository pushed_at field

CLEAN · trust-root / concentration

Among the 44 most active contributors, the busiest (kunchenguid) accounts for about 85% of commits.

GitHub contributors API, first page

Unsurveyed: declared out of scope

Hatched = not measured

OpenSSF Scorecard has no published result for this repository, so its maintenance-hygiene score is not shown.
Nothing was executed. The installer was not run, the package was not installed, and no binary was launched, so every statement here is about what the code says it does rather than what it did.
The contents of compiled and generated files were not reviewed. They can only be read by running the project's own build or by disassembly.
Install scripts hosted outside this repository were not fetched. Only scripts committed to the repository itself are read.

Declared limits are as load-bearing as findings: this is the difference between a report and a scanner that implies completeness.

Target

kunchenguid/firstmate

Revision

51d2e8c

Files listed / read

506 / 7 · 0 executed

Method

read one at a time over HTTPS. Nothing cloned, extracted, installed or executed

Summary by

deepseek-ai/DeepSeek-V4-Flash-0731-TEE, given the findings above and nothing else

Generated

2026-09-06 12:07:04 UTC · served from cache

Verdict

arithmetic over distinct concerns, recomputable by anyone

Formats

JSON · new survey

Share on X