Loading npm security reports…

@antoneeo/agentic-sdlc-skill@1.23.0: AI-agent control-surface | LPM Firewall

registry / @antoneeo/agentic-sdlc-skill / 1.23.0

@antoneeo/agentic-sdlc-skill@1.23.0

Documentation-First SDLC protocol for Claude Code, Gemini CLI, Google Antigravity and Codex with risk triage, Vision governance, installed support files and optional devPNT integration.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time lifecycle code mutates globally discovered third-party AI-agent skill/control directories without an explicit user command. It copies package-controlled instructions and helpers into each detected client.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm postinstall during package installation

Impact

Persistent package-controlled behavior becomes available to detected Claude, Gemini, Codex, and Antigravity clients.

Mechanism

automatic global AI-agent skill installation

Policy narrative

On npm installation, postinstall detects installed AI clients via CLI checks, environment variables, or home-directory presence. It then recursively copies the package-controlled skill tree into globally loaded Claude, Gemini, Codex, and Antigravity skill directories. This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces; no network exfiltration is required for the persistence to take effect.

Rationale

The lifecycle hook automatically installs package-controlled agent instructions into multiple global AI-client control surfaces. That concrete install-time mutation meets the blocking policy despite the absence of network or credential theft.

Evidence

package.jsonscripts/postinstall.jsscripts/lib.jsskills/agentic-sdlc-skill/SKILL.mdskills/agentic-sdlc-skill~/.claude/skills/agentic-sdlc~/.gemini/skills/agentic-sdlc~/.codex/skills/agentic-sdlc

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/lib.jsView file

12Install-time code directly mutates a foreign AI-agent control surface: L74: cmd: 'claude', L75: home: process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), '.claude'), L76: envVar: 'CLAUDE_CONFIG_DIR', ... L90: cmd: 'codex', L91: home: process.env.CODEX_HOME || path.join(os.homedir(), '.codex'), L92: envVar: 'CODEX_HOME', ... L146: function copyRecursive(src, dest) { L147: if (typeof fs.cpSync === 'function') { L148: fs.cpSync(src, dest, { recursive: true, force: true }); L149: return; ... L151: // Fallback for Node < 16.7 L152: if (!fs.existsSync(dest)) fs.mkdirSync(dest, { recursive: true }); Write operation from scripts/postinstall.js: L12: try { L13: fs.mkdirSync(target, { recursive: true }); L14: copyRecursive(SKILL_SOURCE, target); Foreign user/project scope from scripts/lib.js: L

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/lib.jsView on unpkg · L12

skills/agentic-sdlc-skill/scripts/sdlc_check.pyView file

•path = skills/agentic-sdlc-skill/scripts/sdlc_check.py kind = build_helper sizeBytes = 3084 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/agentic-sdlc-skill/scripts/sdlc_check.pyView on unpkg

scripts/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @antoneeo/agentic-sdlc-skill@1.20.3 matchedIdentity = npm:[redacted]:1.20.3 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/init.jsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 4-44json

4 "description": "Documentation-First SDLC protocol for Claude Code, Gemini CLI, Google Antigravity and Codex with risk triage, Vision governance, installed support files and optional devPNT integration.",

5 "keywords": [

6 "claude-code",

7 "claude-skill",

8 "gemini-cli",

9 "skill",

10 "sdlc",

11 "documentation",

12 "ai-agent"

13 ],

14 "author": "Antonio Pinto (https://github.com/Antoneeo)",

15 "license": "MIT",

16 "publishConfig": {

17 "access": "public"

18 },

19 "bin": {

20 "agentic-sdlc-init": "scripts/init.js",

21 "agentic-sdlc-install-skill": "scripts/postinstall.js"

22 },

23 "scripts": {

24 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L24

25 "preuninstall": "node scripts/preuninstall.js"

26 },

27 "files": [

28 "skills/agentic-sdlc-skill/SKILL.md",

29 "skills/agentic-sdlc-skill/templates.md",

30 "skills/agentic-sdlc-skill/architect.md",

31 "skills/agentic-sdlc-skill/guides.md",

32 "skills/agentic-sdlc-skill/vision.md",

33 "skills/agentic-sdlc-skill/tdd.md",

34 "skills/agentic-sdlc-skill/debugging.md",

35 "skills/agentic-sdlc-skill/elicitation.md",

36 "skills/agentic-sdlc-skill/review.md",

37 "skills/agentic-sdlc-skill/dispatch.md",

38 "skills/agentic-sdlc-skill/routing.md",

39 "skills/agentic-sdlc-skill/ENFORCEMENT.md",

40 "skills/agentic-sdlc-skill/scripts/sdlc_check.py",

41 "skills/agentic-sdlc-skill/scripts/sdlc_core.py",

42 "gemini-extension.json",

43 "README.md",

44 "CHANGELOG.md",

scripts/lib.jsView file

Lines 1-32javascript

1// Shared helpers for the Agentic SDLC npm scripts (init / postinstall / preuninstall).

2// Single source for client detection and skill-target paths: init and postinstall

3// must never disagree on what "Claude Code is installed" means.

4

5const fs = require('fs');

6const path = require

skills/agentic-sdlc-skill/scripts/sdlc_check.pyView file

•path = skills/agentic-sdlc-skill/scripts/sdlc_check.py kind = build_helper sizeBytes = 3084 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/agentic-sdlc-skill/scripts/sdlc_check.pyView on unpkg

scripts/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @antoneeo/agentic-sdlc-skill@1.20.3 matchedIdentity = npm:[redacted]:1.20.3 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/init.jsView on unpkg