registry / AI-agent control-surface risk / @axiomantic/braid
@axiomantic/braid
Sub-Second APFS Copy-on-Write Workspaces & Zero-Mirage Git Weaving Engine
This report shows the evidence for @axiomantic/braid@0.1.0, the only known version.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe automatic lifecycle hook writes instructions into several foreign AI-agent configuration trees. This concrete unconsented control-surface mutation meets the blocking policy.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the npm package runs the post-install lifecycle hook.
Impact
Installed AI coding assistants can load package-supplied instructions without the user's explicit setup action.
Mechanism
The hook creates rule or instruction directories as needed and writes braid.md containing package-supplied agent instructions.
Policy narrative
During npm installation, the package automatically invokes its post-install script. If it detects supported assistant configuration roots, it writes package-controlled instruction files into Claude Code, OpenCode, and Antigravity locations. The behavior crosses into existing AI-agent control surfaces without an explicit user command or consent prompt.
AI rationale
The automatic lifecycle hook writes instructions into several foreign AI-agent configuration trees. This concrete unconsented control-surface mutation meets the blocking policy.
Evidence
package.jsonscripts/postinstall.js.claude/rules/braid.md.config/opencode/instructions/braid.md.gemini/antigravity/rules/braid.md
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.
Evidence for policy risk
- The package registers scripts/postinstall.js as an automatic npm post-install hook.
- The post-install script creates destination directories and writes a file without a consent prompt.
- The hook places its rule content in detected Claude Code, OpenCode, and Antigravity configuration locations.
Evidence against
- No network request, credential collection, or command execution was identified in the post-install script.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg15"scripts": {
"postinstall": "node scripts/postinstall.js"
},
"publishC
High
Suspicious Lifecycle Evidence
The package registers scripts/postinstall.js as an automatic npm post-install hook.
package.jsonView on unpkg · L15•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/braidView file
Findings
3 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencescripts/postinstall.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Native Binarybin/braid
MediumShips Build Helperscripts/install.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @axiomantic/braid@0.1.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing @axiomantic/braid@0.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.