registry / @axiomantic/vine / 0.1.1

@axiomantic/vine@0.1.1

Sub-Second APFS Copy-on-Write Workspaces & Zero-Mirage Git Weaving Engine

AI Security Review

scanned 9d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. The npm post-install hook changes user-level AI coding-assistant rule directories without an explicit user command. It also downloads a native archive through a shell command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package with npm.

Impact

Package installation can alter the instructions used by multiple installed AI coding assistants and introduces an unverified install-time download.

Mechanism

The post-install script detects assistant configuration directories, deletes braid.md, writes vine.md, and retrieves a release archive.

Policy narrative

On npm installation, the package runs scripts/postinstall.js. That script automatically looks for user-level AI assistant configuration directories, removes existing braid rule files, and writes Vine rules in their place. This is an unconsented mutation of a foreign and broad AI-agent control surface. The same hook also uses curl through a shell command to download a release archive.

AI rationale

The package has a concrete automatic install-time path that mutates multiple external AI-agent instruction surfaces. This meets the blocking policy for unconsented post-install control-surface mutation.

Evidence

package.jsonscripts/postinstall.js~/.claude/rules/braid.md~/.claude/rules/vine.md~/.config/opencode/instructions/braid.md~/.config/opencode/instructions/vine.md

Network endpoints1

/axiomantic/vine/releases/download

@axiomantic/vine@0.1.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code