@ai-content-space/loopx@0.9.3: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@ai-content-space/loopx@0.9.3: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-skills.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/install-discovery.mjsView file

98Install-time AI-agent control hijack evidence: L98: kind: 'plugin', L99: sourceRelativePath: 'plugins/loopx/.codex-plugin/plugin.json', L100: }, ... L126: const home = resolve(env.LOOPX_HOME || env.HOME || process.cwd()); L127: return resolve(env.LOOPX_AGENTS_ROOT || join(home, '.agents')); L128: } ... L135: const home = resolve(env.LOOPX_HOME || env.HOME || process.cwd()); L136: return resolve(env.LOOPX_CLAUDE_SKILLS_ROOT || join(home, '.claude', 'skills')); L137: } ... L140: const home = resolve(env.LOOPX_HOME || env.HOME || process.cwd()); L141: return resolve(env.LOOPX_CLAUDE_SETTINGS_PATH || join(home, '.claude', 'settings.json')); L142: } Payload evidence from [redacted]-features.md: L186: } L187: return ctx.JSON(200, resp) L188: }) ... L295: "kratos-mcp": { L296: "url": "http://loca

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

src/install-discovery.mjsView on unpkg · L98

•matchType = previous_version_dangerous_delta matchedPackage = @ai-content-space/loopx@0.4.3 matchedIdentity = npm:QGFpLWNvbnRlbnQtc3BhY2UvbG9vcHg:0.4.3 similarity = 0.462 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/install-discovery.mjsView on unpkg

113function jsonClone(value) { L114: return JSON.parse(JSON.stringify(value)); L115: } ... L120: L121: export function getProjectRoot(env = process.env) { L122: return resolve(env.LOOPX_PROJECT_ROOT || PROJECT_ROOT); ... L125: export function getAgentsRoot(env = process.env) { L126: const home = resolve(env.LOOPX_HOME || env.HOME || process.cwd()); L127: return resolve(env.LOOPX_AGENTS_ROOT || join(home, '.agents')); ... L277: path, L278: data: { L279: version: 3,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/install-discovery.mjsView on unpkg · L113

src/runtime-maintenance.mjsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { mkdir, rename } from 'node:fs/promises'; import { existssync, readdirsync } from 'node:fs'; import { spawnsync } from 'node:child_process'; import { basename, dirname, join, resolve } from 'node:path'; import { gettemplatebaselinepath, inspectinstallstate, verifyinstallstate } from './install-discovery.mjs'; import { inspecttemplategovernance } from './template-governance.mjs'; import { inspectworkspacecontext } from './workspace-context.mjs'; export function resolveloopxroot(cwd) { return join(resolve(cwd), '.loopx'); } export function resolveuppercaseloopxroot(cwd) { return join(resolve(cwd), '.loopx'); } function existsexactpath(path) { const parent = dirna

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/runtime-maintenance.mjsView on unpkg

skills/generate-api-docs/scripts/validate_api_docs.rbView file

•path = skills/generate-api-docs/scripts/validate_api_docs.rb kind = build_helper sizeBytes = 34383 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/generate-api-docs/scripts/validate_api_docs.rbView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 63-97json

63 "skills/prompt-lint/",

64 "skills/refactor-plan/",

65 "skills/requirement-analyzer/",

66 "skills/sql-style/",

67 "skills/spec/",

68 "skills/design-review/",

69 "skills/tdd/",

70 "skills/using-git-worktrees/",

71 "skills/verify/",

72 "templates/spec.md",

73 "templates/working-agreement.md",

74 "templates/intake-clarification.md",

75 "templates/intake-requirements.md",

76 "plugins/loopx/",

77 "!plugins/loopx/scripts/plugin-install.test.mjs"

78 ],

79 "publishConfig": {

80 "access": "public"

81 },

82 "scripts": {

83 "postinstall": "node scripts/install-skills.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L83

84 "eval:agent": "node scripts/run-agent-evals.mjs",

85 "eval:codex-normalize": "node scripts/normalize-codex-agent-trace.mjs",

86 "eval:codex-live": "node scripts/run-codex-live-agent-evals.mjs",

87 "eval:claude-live": "node scripts/run-claude-live-agent-evals.mjs",

88 "eval:darwin-simple": "node scripts/run-darwin-simple-evals.mjs",

89 "eval:req-demo": "node scripts/run-req-demo-evals.mjs",

90 "eval:benchmark": "node scripts/run-benchmark-evals.mjs",

91 "eval:benchmark:aggregate": "node scripts/aggregate-benchmark-reports.mjs",

92 "eval:drills": "node scripts/run-drills.mjs",

93 "eval:aggregate": "node scripts/aggregate-agent-evals.mjs",

94 "test": "node scripts/verify-skills.mjs && node --test test/*.test.mjs"

95 }

96}

97

src/install-discovery.mjsView file

Lines 78-133javascript

78const LOOPX_AGENT_GUIDANCE_HEADING = '## loopx Specs And Memory';

79const LOOPX_AGENT_GUIDANCE_CONTENT = [

80 LOOPX_AGENT_GUIDANCE_HEADING,

81 '',

82 'When working in a repository that uses loopx:'

src/runtime-maintenance.mjsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { mkdir, rename } from 'node:fs/promises'; import { existssync, readdirsync } from 'node:fs'; import { spawnsync } from 'node:child_process'; import { basename, dirname, join, resolve } from 'node:path'; import { gettemplatebaselinepath, inspectinstallstate, verifyinstallstate } from './install-discovery.mjs'; import { inspecttemplategovernance } from './template-governance.mjs'; import { inspectworkspacecontext } from './workspace-context.mjs'; export function resolveloopxroot(cwd) { return join(resolve(cwd), '.loopx'); } export function resolveuppercaseloopxroot(cwd) { return join(resolve(cwd), '.loopx'); } function existsexactpath(path) { const parent = dirna

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

src/runtime-maintenance.mjsView on unpkg

skills/generate-api-docs/scripts/validate_api_docs.rbView file

•path = skills/generate-api-docs/scripts/validate_api_docs.rb kind = build_helper sizeBytes = 34383 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/generate-api-docs/scripts/validate_api_docs.rbView on unpkg