@abarcenas/ai-workflow-template@1.34.0: Suspicious npm security | LPM Firewall

Loading npm security reports…

@abarcenas/ai-workflow-template@1.34.0: Suspicious npm security | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/sync.js && node ./scripts/normalize-memory.js && echo '' && echo '⚠️ IMPORTANT: Run npx ai-workflow-setup to configure git hooks' && echo ' (npm postinstall scrip...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/sync.js && node ./scripts/normalize-memory.js && echo '' && echo '⚠️ IMPORTANT: Run npx ai-workflow-setup to configure git hooks' && echo ' (npm postinstall scrip...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/setup/husky-init.jsView file

75try { L76: const consumerRequire = createRequire(join(consumerRoot, 'package.json')) L77: const huskyPath = consumerRequire.resolve('husky')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/setup/husky-init.jsView on unpkg · L75

scripts/sync.jsView file

1Install-time AI-agent control hijack evidence: L1: import { createHash } from 'crypto' L2: import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'fs' L3: import { dirname, join, relative, resolve } from 'path' ... L63: function writeManifest(manifest) { L64: writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`) L65: } ... L67: function ensureParentDirectory(filePath) { L68: mkdirSync(dirname(filePath), { recursive: true }) L69: } ... L76: ensureParentDirectory(targetFile) L77: copyFileSync(sourceFile, targetFile) L78: } Payload evidence from .opencode/agents/architect.agent.md: L1: --- L2: description: "System architecture and design specialist. Designs component architecture, data flow, module boundaries, and technical strategy. Prod

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync.jsView on unpkg · L1

.agents/skills/compress/scripts/benchmark.pyView file

•path = .[redacted].py kind = payload_in_excluded_dir sizeBytes = 2264 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/compress/scripts/benchmark.pyView on unpkg

•path = .[redacted].py kind = build_helper sizeBytes = 2264 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/compress/scripts/benchmark.pyView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-40json

1{

2 "name": "@abarcenas/ai-workflow-template",

3 "version": "1.34.0",

4 "description": "A comprehensive template repository for AI-assisted development workflows using GitHub Copilot. This template provides a structured approach to leveraging AI assistance through pre-configured skills, prompts, agents, and coding standards.",

5 "main": "index.js",

6 "bin": {

7 "ai-workflow-setup": "./bin/setup.js"

8 },

9 "scripts": {

10 "test": "playwright test",

11 "test:headed": "playwright test --headed",

12 "test:ui": "playwright test --ui",

13 "test:debug": "playwright test --debug",

14 "test:report": "playwright show-report",

15 "test:unit": "vitest run",

16 "test:unit:coverage": "vitest run --coverage",

17 "test:unit:watch": "vitest",

18 "prepare": "husky",

19 "sync": "node ./scripts/sync.js",

20 "postinstall": "node ./scripts/sync.js && node ./scripts/normalize-memory.js && echo '' && echo '⚠️ IMPORTANT: Run npx ai-workflow-setup to configure git hooks' && echo ' (npm postinstall scripts will be blocked by npm v12+)'",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L20

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L20

21 "memory:search": "node ./scripts/memory-cli.js search",

22 "memory:rebuild": "node ./scripts/memory-cli.js rebuild",

23 "memory:update": "node ./scripts/memory-cli.js update",

24 "memory:normalize": "node ./scripts/normalize-memory.js"

25 },

26 "repository": {

27 "type": "git",

28 "url": "git+https://github.com/abarcenas29/ai-workflow-template.git"

29 },

30 "keywords": [],

31 "author": "",

32 "license": "ISC",

33 "type": "module",

34 "bugs": {

35 "url": "https://github.com/abarcenas29/ai-workflow-template/issues"

36 },

37 "homepage": "https://github.com/abarcenas29/ai-workflow-template#readme",

38 "files": [

39 "bin/",

40 ".agents/",

scripts/setup/husky-init.jsView file

Lines 55-95javascript

55 if (isCI) {

56 warn('[setup] CI environment detected — skipping husky init')

57 return {

58 action: 'skipped',

59 message: 'Skipping husky init in CI environment',

60 }

61

scripts/sync.jsView file

Lines 1-21javascript

1import { createHash } from 'crypto'

2import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'fs'

3import { dirname, join, relative, resolve } from 'path'

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync.jsView on unpkg · L1

4import

.agents/skills/compress/scripts/benchmark.pyView file

•path = .[redacted].py kind = payload_in_excluded_dir sizeBytes = 2264 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/compress/scripts/benchmark.pyView on unpkg

•path = .[redacted].py kind = build_helper sizeBytes = 2264 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/compress/scripts/benchmark.pyView on unpkg