@aweray/hsk-cli: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@aweray/hsk-cli: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/hsk-cli.jsView file

2L3: const { program } = require('commander'); L4: const chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hsk-cli.jsView on unpkg · L2

lib/core/updateCheck.jsView file

8const path = require('path'); L9: const { spawn } = require('child_process'); L10: const fetch = require('node-fetch'); ... L12: const { homeDir } = require('../../config/agent-dirs'); L13: const pkg = require('../../package.json'); L14: const installKind = require('./installKind'); ... L17: const SCHEMA_VERSION = 1; L18: const DEFAULT_REGISTRY = 'https://registry.npmjs.org'; L19: const DEFAULT_INTERVAL_HOURS = 24; ... L24: function cachePath() { L25: return path.join(homeDir(), '.hsk', 'update-check.json'); L26: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/core/updateCheck.jsView on unpkg · L8

•matchType = previous_version_dangerous_delta matchedPackage = @aweray/hsk-cli@0.7.13 matchedIdentity = npm:QGF3ZXJheS9oc2stY2xp:0.7.13 similarity = 0.714 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/core/updateCheck.jsView on unpkg

scripts/postinstall.jsView file

4/** L5: * postinstall.js —— npm install 时生成 ~/.hsk/AGENTS.md（D1-S2，R-1）。 L6: * L7: * 行为： L8: * - 读包内单一源：templates/AGENTS.md.tmpl + capability-flags.json + copy.json L9: * （包内文件，无二进制依赖，G-6），注入 VERSION（package.json version）、 L10: * UPDATED（当前日期）等变量，用 lib/core/tmpl.js 渲染。 L11: * - 升级刷新（AC-1.4）：目标 ~/.hsk/AGENTS.md 已存在且 frontmatter version == L12: * 当前版本 → 不重写（幂等）；版本不同（升级）→ 重渲染覆盖。 ... L33: const ROOT = path.join(__dirname, '..'); // hsk-cli/ L34: const TPL_FILE = path.join(ROOT, 'templates', 'AGENTS.md.tmpl'); L35: const FLAGS_FILE = path.join(ROOT, 'templates', 'capability-flags.json');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L4

config/agents.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

config/agents.jsonView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1-39json

1{

2 "name": "@aweray/hsk-cli",

3 "version": "0.7.24",

4 "description": "花生壳CLI - 内网穿透 & 文件托管，支持 Windows/macOS/Linux 多平台",

5 "main": "index.js",

6 "bin": {

7 "hsk-cli": "bin/hsk-cli.js"

8 },

9 "scripts": {

10 "check": "node scripts/check-local.js && node scripts/check-copy.js && node scripts/check-copy-docs.js",

11 "test": "npm run check",

12 "test:unit": "node --test \"test/**/*.test.js\"",

13 "sync-templates": "node scripts/sync-templates.js",

14 "gen-capabilities": "node scripts/gen-capabilities.js",

15 "check-copy": "node scripts/check-copy.js",

16 "check-copy-docs": "node scripts/check-copy-docs.js",

17 "render-copy-docs": "node scripts/render-copy-docs.js",

18 "release:inject-version": "node scripts/release-inject-version.js",

19 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L19

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L19

20 },

21 "keywords": [

22 "hsk",

23 "tunnel",

24 "nat-traversal",

25 "file-hosting",

26 "cli",

27 "内网穿透",

28 "文件托管",

29 "ai-agent",

30 "remote-access"

31 ],

32 "author": "HSK Team",

33 "license": "MIT",

34 "engines": {

35 "node": ">=16.0.0"

36 },

37 "dependencies": {

38 "commander": "^11.0.0",

39 "chalk": "^4.1.2",

bin/hsk-cli.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2

3const { program } = require('commander');

4const chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hsk-cli.js

lib/core/updateCheck.jsView file

Lines 1-28javascript

1'use strict';

2

3/**

4 * npm 包更新检测（与 versionCheck 双轨二进制比对互不替代）。

5 * 启动路径只读本地缓存、零网络；后台 worker 刷新 registry。

6 */

7const fs = require('fs');

8const

scripts/postinstall.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2'use strict';

3

4/**

5 * postinstall.js —— npm install 时生成 ~/.hsk/AGENTS.md（D1-S2，R-1）。

6 *

7 * 行为：

8 * - 读包内单一源：templates/AGENTS.md.tmpl + capability-flags.json + copy.json

9 * （包内文件，无二进制依赖，G-6），注入 VERSION（package.json version）、

10 * UPDATED（当前日期）等变量，用 lib/core/tmpl.js 渲染。

11 * - 升级刷新（AC-1.4）：目标 ~/.hsk/AGENTS.md 已存在且 frontmatter version ==

config/agents.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

config/agents.jsonView on unpkg