@66rpg/lumimaker@0.1.54
幻光文游制作器：登录、校验并发布到幻光文游社区；validate-template（TS）；login / publish 等转发 lumimaker
AI Security Review
scanned 23d ago · by lpm-firewall-aiThe source indicates a first-party agent skill setup capability that requires an explicit CLI command. I found no evidence of an automatic install-time configuration change or a separate concrete attack, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs `lumimaker skill`, with or without a platform option.
Impact
The setup operation can affect project agent skill configuration. The inspected source does not establish that this happens automatically during package installation.
Mechanism
The wrapper accepts a platform selection or prompts for one, then delegates the command to its local native CLI; the package also lists project agent skill directories as targets.
AI rationale
The source indicates a first-party agent skill setup capability that requires an explicit CLI command. I found no evidence of an automatic install-time configuration change or a separate concrete attack, so this warrants a warning rather than a block.
Evidence
dist/index.jsskill-targets.jsonskill/lumimaker/SKILL.md.agents/skills.cursor/skills.claude/skills.codex/skills.opencode/skills.codebuddy/skills.workbuddy/skills.trae/skills.kimi/skills.qwen/skills
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package provides a user-run `lumimaker skill` command with platform selection, then delegates command handling to a local native CLI.
- The package ships its own skills and lists project agent skill directories as targets, including `.agents/skills`, `.cursor/skills`, and `.claude/skills`.
- The flagged agent-configuration location in `dist/index.js` concerns project validation metadata, not agent configuration changes.
Evidence against
- The manifest lists build and publishing lifecycle scripts, but no install-time hook that sets up agent skills.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
MinifiedUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/index.jsView file
1import K from"picocolors";import{spawn as fr}from"node:child_process";import P from"node:fs";import _r from"node:os";import V from"node:path";var an={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var Ur=new Set(["publish","publish-template","publish-template-data","publish-project"]),Vr=Ur,hn="LUMIMAKER_PUBLISH_CONFIRMED";function it(e,t=process.env){e...
High
1import K from"picocolors";import{spawn as fr}from"node:child_process";import P from"node:fs";import _r from"node:os";import V from"node:path";var an={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var Ur=new Set(["publish","publish-template","publish-template-data","publish-project"]),Vr=Ur,hn="LUMIMAKER_PUBLISH_CONFIRMED";function it(e,t=process.env){e...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L11import K from"picocolors";import{spawn as fr}from"node:child_process";import P from"node:fs";import _r from"node:os";import V from"node:path";var an={$schema:"http://json-schema.or...
L2: `),!0}catch{return!1}}var Ur=new Set(["publish","publish-template","publish-template-data","publish-project"]),Vr=Ur,hn="LUMIMAKER_PUBLISH_CONFIRMED";function it(e,t=process.env){e...
Findings
5 High3 Medium5 Low
HighChild Processdist/index.js
HighShell
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/validate.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @66rpg/lumimaker@0.1.54.
See all versions of @66rpg/lumimaker for other recorded verdicts.
- Review the evidence and your use of @66rpg/lumimaker@0.1.54 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.