Claude Code Installer v5.13 security review notes

Publisher:
Shanghai UltraDimension Technology Co., Ltd.

Download origin:
https://download.ultradimension.cn

Source repository:
https://github.com/haiyichen001/UltraDimension-service

Purpose:
User-initiated Claude Code remote installation assistant. The installer opens a
temporary, encrypted Rospo SSH tunnel so the HYC2 server-side Claude Code agent
can install or repair Claude Code, inject the user's UltraDimension API key, and
run an end-to-end shortcut smoke test.

Trust and lifecycle controls:
- License agreement is shown before installation starts.
- A valid license token is required before tunnel setup.
- The tunnel service is visible as RospoTunnel.
- The tunnel is stopped and deleted after success, failure, cancel, or timeout.
- No Defender exclusions are created.
- SmartScreen is not disabled.
- Download Mark-of-the-Web is not removed programmatically.
- No browser extensions, adware, cryptominers, or analytics telemetry are bundled.

Artifacts:
- claude-code-installer-linux.run sha256=6b3a0dfa2604ceac30491d26b4554505fc1687eeee3eba92ef298ace377ed34f size=35354337
- claude-code-installer-mac.command sha256=ca9aa79329847f2975ab4c8df8851b78c898fe06f695833df8a7282c63496a32 size=24128671
- claude-code-installer-windows.exe sha256=2035c8e2c9094610967b20b54cf2d4028fac422886f676a0a270be522b855637 size=29759488

Microsoft false-positive submission:
https://www.microsoft.com/wdsi/filesubmission