registry / @antoneeo/mkt-agentic-sdlc-skill / 0.4.4

@antoneeo/mkt-agentic-sdlc-skill@0.4.4

Evidence-First marketing planning protocol for Claude Code, Gemini CLI, Google Antigravity and Codex: engagement triage, SOSTAC workflow, evidence ledger, mechanical validator and optional devPNT integration.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Install-time code writes this package's bundled skill into detected global AI-client skill directories. This is automatic extension setup, not a confirmed hijack or exfiltration chain.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

Automatically adds a marketing skill to detected Claude, Gemini, Codex, or Antigravity installations.

Mechanism

client detection followed by recursive bundled-skill copy

AI rationale

Automatic global AI-agent extension installation is a real lifecycle risk and warrants a warning. Source inspection found no concrete malicious behavior, foreign control-surface rewrite, or exfiltration.

Evidence

package.jsonscripts/lib.jsscripts/postinstall.jsscripts/preuninstall.jsscripts/init.jsskills/mkt-agentic-sdlc/scripts/sdlc_core.pyskills/mkt-agentic-sdlc~/.claude/skills/mkt-agentic-sdlc~/.gemini/skills/mkt-agentic-sdlc~/.codex/skills/mkt-agentic-sdlc~/.gemini/config/skills/mkt-agentic-sdlc

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

package.json runs postinstall automatically.
scripts/postinstall.js detects installed AI clients and copies a skill into their global skill directories.
scripts/lib.js targets Claude, Gemini, Codex, and Antigravity homes based on environment variables or directory/CLI detection.

Evidence against

No network, credential harvesting, remote payload, eval, or dynamic loading found.
Copied payload is the bundled skill/validator; no foreign agent configuration is edited by postinstall.
scripts/preuninstall.js only removes the package's own named skill directory.
scripts/init.js project-file writes require explicit user CLI invocation.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 21.8 KB of source

Source & flagged code

4 flagged

package.jsonView file

Lines 5-45json

5 "keywords": [

6 "claude-code",

7 "claude-skill",

8 "gemini-cli",

9 "skill",

10 "marketing",

11 "marketing-plan",

12 "sostac",

13 "ai-agent"

14 ],

15 "author": "Antonio Pinto (https://github.com/Antoneeo)",

16 "license": "MIT",

17 "publishConfig": {

18 "access": "public"

19 },

20 "bin": {

21 "mkt-sdlc-init": "scripts/init.js",

22 "mkt-sdlc-install-skill": "scripts/postinstall.js"

23 },

24 "scripts": {

25 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L25

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L25

26 "preuninstall": "node scripts/preuninstall.js"

27 },

28 "files": [

29 "skills/mkt-agentic-sdlc/SKILL.md",

30 "skills/mkt-agentic-sdlc/frameworks.md",

31 "skills/mkt-agentic-sdlc/elicitation.md",

32 "skills/mkt-agentic-sdlc/research.md",

33 "skills/mkt-agentic-sdlc/templates.md",

34 "skills/mkt-agentic-sdlc/review.md",

35 "skills/mkt-agentic-sdlc/scripts/sdlc_core.py",

36 "skills/mkt-agentic-sdlc/routing.md",

37 "skills/mkt-agentic-sdlc/guides.md",

38 "skills/mkt-agentic-sdlc/vision.md",

39 "skills/mkt-agentic-sdlc/dispatch.md",

40 "skills/mkt-agentic-sdlc/ENFORCEMENT.md",

41 "skills/mkt-agentic-sdlc/scripts/mkt_check.py",

42 "gemini-extension.json",

43 "README.md",

44 "CHANGELOG.md",

45 "scripts/lib.js",

scripts/lib.jsView file

Lines 1-32javascript

1// Shared helpers for the Marketing Agentic SDLC npm scripts (init / postinstall / preuninstall).

2// Single source for client detection and skill-target paths: init and postinstall

3// must never disagree on what "Claude Code is installed" means.

5const fs = require('fs');

6const path =

skills/mkt-agentic-sdlc/scripts/sdlc_core.pyView file

•path = skills/mkt-agentic-sdlc/scripts/sdlc_core.py kind = build_helper sizeBytes = 104607 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/mkt-agentic-sdlc/scripts/sdlc_core.pyView on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/lib.jsView file

12Install-time code directly mutates a foreign AI-agent control surface: L80: cmd: 'claude', L81: home: process.env.CLAUDE_CONFIG_DIR || path.join(os.homedir(), '.claude'), L82: envVar: 'CLAUDE_CONFIG_DIR', ... L96: cmd: 'codex', L97: home: process.env.CODEX_HOME || path.join(os.homedir(), '.codex'), L98: envVar: 'CODEX_HOME', ... L152: function copyRecursive(src, dest) { L153: if (typeof fs.cpSync === 'function') { L154: fs.cpSync(src, dest, { recursive: true, force: true }); L155: return; ... L157: // Fallback for Node < 16.7 L158: if (!fs.existsSync(dest)) fs.mkdirSync(dest, { recursive: true }); Write operation from scripts/postinstall.js: L12: try { L13: fs.mkdirSync(target, { recursive: true }); L14: copyRecursive(SKILL_SOURCE, target); Foreign user/project scope from scripts/lib.js: L

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/lib.jsView on unpkg · L12

skills/mkt-agentic-sdlc/scripts/sdlc_core.pyView file

•path = skills/mkt-agentic-sdlc/scripts/sdlc_core.py kind = build_helper sizeBytes = 104607 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/mkt-agentic-sdlc/scripts/sdlc_core.pyView on unpkg

Findings

1 Critical1 High4 Medium4 Low

CriticalAi Agent Control Hijackscripts/lib.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helperskills/mkt-agentic-sdlc/scripts/sdlc_core.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @antoneeo/mkt-agentic-sdlc-skill@0.4.4.

See version security history for other recorded verdicts.

Review the evidence and your use of @antoneeo/mkt-agentic-sdlc-skill@0.4.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-05 22:08:22.241Z (UTC).