Loading npm security reports…

@antoneeo/kb-agentic-skill@1.4.4: AI-agent control-surface risk | LPM Firewall

registry / @antoneeo/kb-agentic-skill / 1.4.4

@antoneeo/kb-agentic-skill@1.4.4

Knowledge-Base & Document-First protocol for Claude Code, Gemini CLI, Google Antigravity and Codex with risk triage, Vision governance, signal distillation and optional devPNT integration.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time code automatically modifies detected Claude, Gemini, Codex, and Antigravity global skill directories. This adds package-controlled instructions to foreign AI-agent control surfaces without an explicit setup command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

A package install can cause supported agents to load its instructions globally.

Mechanism

auto-detect clients and recursively copy the packaged skill

Policy narrative

The npm postinstall hook detects AI-agent installations from CLI availability, environment variables, or existing configuration directories, then recursively copies its skill into global directories for Claude, Gemini, Codex, and Antigravity. Those directories are loaded by the respective agents, so an ordinary package installation mutates multiple foreign agent control surfaces without requiring the advertised explicit installer command.

Rationale

The install hook implements concrete, unconsented mutation of broad foreign AI-agent skill locations. Absence of exfiltration does not remove that install-time control-surface risk.

Evidence

package.jsonscripts/postinstall.jsscripts/lib.jsscripts/preuninstall.jsscripts/init.js~/.claude/skills/kb-agentic~/.gemini/skills/kb-agentic~/.codex/skills/kb-agentic~/.gemini/config/skills/kb-agentic

Source & flagged code

4 flagged

package.jsonView file

Lines 4-44json

4 "description": "Knowledge-Base & Document-First protocol for Claude Code, Gemini CLI, Google Antigravity and Codex with risk triage, Vision governance, signal distillation and optional devPNT integration.",

5 "keywords": [

6 "claude-code",

7 "claude-skill",

8 "gemini-cli",

9 "skill",

10 "knowledge-base",

11 "documentation",

12 "ai-agent"

13 ],

14 "author": "Antonio Pinto (https://github.com/Antoneeo)",

15 "license": "MIT",

16 "publishConfig": {

17 "access": "public"

18 },

19 "bin": {

20 "kb-agentic-init": "scripts/init.js",

21 "kb-agentic-install-skill": "scripts/postinstall.js"

22 },

23 "scripts": {

24 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L24

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L24

25 "preuninstall": "node scripts/preuninstall.js"

26 },

27 "files": [

28 "skills/kb-agentic-skill/SKILL.md",

29 "skills/kb-agentic-skill/templates.md",

30 "skills/kb-agentic-skill/taxonomy.md",

31 "skills/kb-agentic-skill/guides.md",

32 "skills/kb-agentic-skill/vision.md",

33 "skills/kb-agentic-skill/distillation.md",

34 "skills/kb-agentic-skill/reconciliation.md",

35 "skills/kb-agentic-skill/elicitation.md",

36 "skills/kb-agentic-skill/review.md",

37 "skills/kb-agentic-skill/dispatch.md",

38 "skills/kb-agentic-skill/routing.md",

39 "skills/kb-agentic-skill/portability.md",

40 "skills/kb-agentic-skill/ENFORCEMENT.md",

41 "skills/kb-agentic-skill/scripts/sdlc_check.py",

42 "skills/kb-agentic-skill/scripts/sdlc_core.py",

43 "gemini-extension.json",

44 "README.md",

scripts/lib.jsView file

Lines 1-32javascript

1// Shared helpers for the KB Agentic npm scripts (init / postinstall / preuninstall).

2// Single source for client detection and skill-target paths.

3

4const fs = require('fs');

5const path = require('path');

skills/kb-agentic-skill/scripts/sdlc_check.pyView file

•path = skills/kb-agentic-skill/scripts/sdlc_check.py kind = build_helper sizeBytes = 63957 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/kb-agentic-skill/scripts/sdlc_check.pyView on unpkg