@bfrs/agentic-components@0.8.2
Shiprocket agentic component library and documentation showcase.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe postinstall hook makes unconsented changes to consumer AI-agent instruction files and build configuration. This is install-time AI-agent control-surface abuse, so publication should be blocked.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package in a consumer project runs its postinstall hook; setup is skipped only by an environment opt-out.
Impact
The package can influence later AI-agent behavior and alter consumer build commands through install-time changes to project configuration.
Mechanism
The hook copies package-owned guidance into the project, inserts references into AGENTS.md and CLAUDE.md files, and modifies package build scripts to run the package lint command.
Policy narrative
A consumer install automatically runs the package hook. It writes package-owned guidance into the consumer project, updates agent instruction files, and changes build scripts to invoke the package lint command. The only setup gate shown is an environment opt-out, so these AI-agent control-surface changes occur without affirmative consent.
AI rationale
The postinstall hook makes unconsented changes to consumer AI-agent instruction files and build configuration. This is install-time AI-agent control-surface abuse, so publication should be blocked.
Evidence
package.jsonscripts/postinstall.cjsBFRS_AGENTIC_COMPONENTS.mdAGENTS.mdagents.mdCLAUDE.mdclaude.md
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.
Evidence for policy risk
- The package runs a postinstall script automatically.
- The script runs for consumer installs and skips setup only when an environment opt-out is set.
- The script copies package-owned guidance into the consumer project and targets AGENTS.md and CLAUDE.md files.
- It creates or appends instructions in those agent files.
- It adds a consumer lint script and prefixes existing build scripts with the package guard.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg54"scripts": {
"postinstall": "node scripts/postinstall.cjs",
"dev": "vite --host 0.0.0
High
Suspicious Lifecycle Evidence
The package runs a postinstall script automatically.
package.jsonView on unpkg · L54•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgscripts/postinstall.cjsView file
Findings
1 Critical4 High3 Medium4 Low
CriticalAi Agent Control Hijackscripts/postinstall.cjs
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/fonts.css
HighSuspicious Lifecycle Evidencepackage.json
HighAi Review Evidencescripts/postinstall.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @bfrs/agentic-components@0.8.2.
See all versions of @bfrs/agentic-components for other recorded verdicts.
- Avoid installing @bfrs/agentic-components@0.8.2. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.