registry / @agentskit/doc-bridge / 1.1.1

@agentskit/doc-bridge@1.1.1

Human↔agent documentation bridge — deterministic handoffs, doc-site links, memory→docs, optional AgentsKit RAG/chat.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `ak-docs mcp install --cursor` or `ak-docs mcp install --claude`.

Impact

Adds an `ak-docs` MCP server entry that can launch `npx ak-docs mcp` for the project.

Mechanism

Explicit AI-agent MCP configuration mutation

Rationale

Source inspection confirms an explicit-user-command AI-agent configuration mutation, which warrants a warning under the stated policy. No concrete malicious behavior was found.

Evidence

package.jsonscripts/prepare.mjssrc/cli/program.tssrc/mcp/install.tssrc/mcp/server.tssrc/intelligence/peers.tssrc/federation/llms.tssrc/memory/github-pr.ts.cursor/mcp.json~/Library/Application Support/Claude/claude_desktop_config.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`src/mcp/install.ts` writes MCP configuration for Cursor or Claude Desktop.
`src/cli/program.ts` exposes this only through explicit `ak-docs mcp install --cursor|--claude`.
Claude target is `~/Library/Application Support/Claude/claude_desktop_config.json`; Cursor target is project `.cursor/mcp.json`.
Configured server runs `npx ak-docs mcp` in the selected project.

Evidence against

`package.json` has no preinstall/install/postinstall hook; `prepare` only builds missing `dist`.
`src/mcp/install.ts` performs no network, credential, or environment harvesting.
`src/mcp/server.ts` exposes local documentation tools and blocks `doc.get` paths escaping the project root.
Dynamic imports in `src/intelligence/peers.ts` are named optional AgentsKit peers, not remote payload loading.
Network fetches are user-configured federation reads or a manually invoked upstream-check script.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 69 file(s), 627 KB of source, external domains: 127.0.0.1, agentskit-io.github.io, agentskit.io, github.com, img.shields.io, json-schema.org, playbook.agentskit.io, raw.githubusercontent.com, www.npmjs.com

Source & flagged code

1 flagged

dist/index.jsView file

Lines 3958-3998javascript

3958var LAYER1_INSTALL = "npm i -D @agentskit/rag @agentskit/ink @agentskit/adapters @agentskit/memory react";

3959var isPeerResolutionFailure = (error) => {

3960 const parts = [];

3961 let cur = error;

3962 for (let i = 0; i < 6 && cur; i += 1) {

3963 if (cur instanceof Error) {

3964 parts.push(cur.message, cur.name);

3965 const code = cur.code;

3966 if (code) parts.push(String(code));

3967 cur = cur.cause;

3968 continue;

3969 }

3970 parts.push(String(cur));

3971 break;

3972 }

3973 const text = parts.join(" ").toLowerCase();

3974 return text.includes("cannot find package") || text.includes("cannot find module") || text.includes("module not found") || text.includes("err_module_not_found") || text.includes("err_package_not_found") || text.includes("err_package_path_not_exported") || text.includes("failed to resolve module") || text.includes(

3975 text.includes("fetch failed") || text.includes("enotfound") || text.includes("getaddrinfo");

3976};

3977var importPeer = async (name) => {

3978 try {

3979 return await import(name);

3980 } catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L3978

3981 if (isPeerResolutionFailure(error)) {

3982 throw new PeerMissingError(name, LAYER1_INSTALL);

3983 }

3984 throw error;

3985 }

3986};

3987var layer1InstallHint = () => LAYER1_INSTALL;

3988

3989// src/intelligence/adapter.ts

3990var readEnv = (name) => {

3991 if (!name) return void 0;

3992 const value = process.env[name];

3993 return value && value.length > 0 ? value : void 0;

3994};

3995var providerDefaultApiKeyEnv = (provider) => {

3996 switch (provider) {

3997 case "openai":

3998 return "OPENAI_API_KEY";

Source & flagged code

1 flagged · loading source

dist/index.jsView file

3978try { L3979: return await import(name); L3980: } catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L3978

Findings

4 Medium5 Low

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

90%Warn

Verdict confidence

IntentDangerous Capability

TypeAI-agent capability abuse

False-positive riskLow

Review stagesource_first_review

Firewall policyWarn-only AI-agent capability risk

Package metadata

npm

AuthorAgentsKit

Maintainersemersonbraun

Version1.1.1

PublishedJul 14, 2026

LicenseMIT

Dependencies7

Integrityverified

Package size564 KB

Files129

Keywordsagentskitdocumentationmcpfor-agentsllms-txtagent-handoffraghuman-agent-bridge

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → ./dist/index.d.tsexports mapbin → ak-docs

Runtimenode >=22

Artifact1.80 MB · 129 files1 signature(s) · provenance

Install lifecycleprepareprepublishOnly

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

1 flagged

dist/index.jsView file

Lines 3958-3998javascript

3958var LAYER1_INSTALL = "npm i -D @agentskit/rag @agentskit/ink @agentskit/adapters @agentskit/memory react";

3959var isPeerResolutionFailure = (error) => {

3960 const parts = [];

3961 let cur = error;

3962 for (let i = 0; i < 6 && cur; i += 1) {

3963 if (cur instanceof Error) {

3964 parts.push(cur.message, cur.name);

3965 const code = cur.code;

3966 if (code) parts.push(String(code));

3967 cur = cur.cause;

3968 continue;

3969 }

3970 parts.push(String(cur));

3971 break;

3972 }

3973 const text = parts.join(" ").toLowerCase();

3975 text.includes("fetch failed") || text.includes("enotfound") || text.includes("getaddrinfo");

3976};

3977var importPeer = async (name) => {

3978 try {

3979 return await import(name);

3980 } catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L3978

3981 if (isPeerResolutionFailure(error)) {

3982 throw new PeerMissingError(name, LAYER1_INSTALL);

3983 }

3984 throw error;

3985 }

3986};

3987var layer1InstallHint = () => LAYER1_INSTALL;

3988

3989// src/intelligence/adapter.ts

3990var readEnv = (name) => {

3991 if (!name) return void 0;

3992 const value = process.env[name];

3993 return value && value.length > 0 ? value : void 0;

3994};

3995var providerDefaultApiKeyEnv = (provider) => {

3996 switch (provider) {

3997 case "openai":

3998 return "OPENAI_API_KEY";