@66rpg/lumimaker@0.1.41
幻光文游制作器：登录、校验并发布到幻光文游社区；validate-template（TS）；login / publish 等转发 lumimaker
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has a concrete user-invoked AI-agent integration capability, but no install-time mutation or confirmed malicious behavior was found. Warn because the forwarded native implementation leaves the exact project-agent configuration changes unresolved.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the lumimaker skill command and selects a platform or all platforms.
Impact
The command may modify AI-assistant project integration content; the inspected wrapper does not expose the exact native write behavior.
Mechanism
The JavaScript wrapper collects skill-platform options and forwards them to a bundled CLI executable.
AI rationale
The package has a concrete user-invoked AI-agent integration capability, but no install-time mutation or confirmed malicious behavior was found. Warn because the forwarded native implementation leaves the exact project-agent configuration changes unresolved.
Evidence
dist/index.jsskill-targets.json
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package defines multiple project AI skill directories, including Cursor, Claude, and Codex locations.
- The explicit skill command lets the user select a platform or all platforms.
- The wrapper forwards the selected command and arguments to its bundled CLI executable.
- The manifest exposes a CLI and has no install lifecycle hook.
Evidence against
- No automatic install-time execution was found.
- No credential harvesting or unapproved network destination was established from the inspected paths.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
MinifiedUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/index.jsView file
1import G from"picocolors";import{spawn as To}from"node:child_process";import j from"node:fs";import Do from"node:os";import U from"node:path";var Mt={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var rr=new Set(["publish","publish-template","publish-template-data","publish-project"]);function We(e,t){let n=e[t];return typeof n!="string"?void 0:n.trim()...
High
1import G from"picocolors";import{spawn as To}from"node:child_process";import j from"node:fs";import Do from"node:os";import U from"node:path";var Mt={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var rr=new Set(["publish","publish-template","publish-template-data","publish-project"]);function We(e,t){let n=e[t];return typeof n!="string"?void 0:n.trim()...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L11import G from"picocolors";import{spawn as To}from"node:child_process";import j from"node:fs";import Do from"node:os";import U from"node:path";var Mt={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var rr=new Set(["publish","publish-template","publish-template-data","publish-project"]);function We(e,t){let n=e[t];return typeof n!="string"?void 0:n.trim()...
Findings
5 High3 Medium5 Low
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/validate.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @66rpg/lumimaker@0.1.41.
See all versions of @66rpg/lumimaker for other recorded verdicts.
- Review the evidence and your use of @66rpg/lumimaker@0.1.41 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.