@66rpg/lumimaker@0.1.46
幻光文游制作器：登录、校验并发布到幻光文游社区；validate-template（TS）；login / publish 等转发 lumimaker
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSkill installation is a real, user-invoked write into many AI-editor skill directories, so it is a guarded first-party agent capability rather than install-time hijacking. The AGENTS.md reference is only a template file-presence check, and package.json has no install lifecycle hook.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the lumimaker skill subcommand, interactively or with platform flags.
Impact
Selected project editor skill directories can receive this package's skill files. No secret theft or unattended install-time mutation was found in this tarball.
Mechanism
The wrapper reads skill-targets.json, selects a platform, and spawns the platform native binary. The success card reports copied skill names and target paths.
AI rationale
Skill installation is a real, user-invoked write into many AI-editor skill directories, so it is a guarded first-party agent capability rather than install-time hijacking. The AGENTS.md reference is only a template file-presence check, and package.json has no install lifecycle hook.
Evidence
dist/index.jsskill-targets.jsonpackage.json.agents/skills.cursor/skills.claude/skills.codex/skills
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The skill subcommand is an explicit CLI path: it prompts for an editor platform unless --platform or --all is already set, then forwards those flags to the native binary and prints copied skill names and target paths.
- skill-targets.json lists project skill directories for many editors, including .agents/skills, .cursor/skills, .claude/skills, and .codex/skills.
- package.json exposes only the lumimaker bin and has build, test, prepack, postpack, and prepublishOnly scripts, with no preinstall, install, or postinstall hook.
Evidence against
- The scanner hit in dist/index.js is the string AGENTS.md inside a template required-file check, not a write to an agent control file.
- No credential harvesting, eval, remote payload fetch, or install-time execution appears in the inspected entrypoints.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
5 flaggeddist/index.jsView file
1import W from"picocolors";import{spawn as rr}from"node:child_process";import P from"node:fs";import ir from"node:os";import V from"node:path";var en={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var Pr=new Set(["publish","publish-template","publish-template-data","publish-project"]),Rr=Pr,un="LUMIMAKER_PUBLISH_CONFIRMED";function et(e,t=process.env){e...
High
1import W from"picocolors";import{spawn as rr}from"node:child_process";import P from"node:fs";import ir from"node:os";import V from"node:path";var en={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var Pr=new Set(["publish","publish-template","publish-template-data","publish-project"]),Rr=Pr,un="LUMIMAKER_PUBLISH_CONFIRMED";function et(e,t=process.env){e...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L11import W from"picocolors";import{spawn as rr}from"node:child_process";import P from"node:fs";import ir from"node:os";import V from"node:path";var en={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var Pr=new Set(["publish","publish-template","publish-template-data","publish-project"]),Rr=Pr,un="LUMIMAKER_PUBLISH_CONFIRMED";function et(e,t=process.env){e...
Findings
5 High3 Medium5 Low
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/validate.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @66rpg/lumimaker@0.1.46.
See all versions of @66rpg/lumimaker for other recorded verdicts.
- Review the evidence and your use of @66rpg/lumimaker@0.1.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.