registry / @bfrs/agentic-components / 0.8.6

@bfrs/agentic-components@0.8.6

Shiprocket agentic component library and documentation showcase.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The postinstall hook makes unconsented project-level changes to agent guidance and build scripts, creating residual agent integration risk. The inspected behavior is first-party library setup and does not establish a concrete attack warranting a block.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation runs the postinstall hook; setup is skipped only by a specific environment variable or when the source guidance file is absent.

Impact

Consumer agent instructions and build commands are changed during installation. The inspected source does not establish credential theft, data exfiltration, or remote execution.

Mechanism

The hook copies its guidance file, appends a reference to AGENTS.md or CLAUDE.md, and adds a lint script while prefixing selected build scripts with its lint command.

AI rationale

Evidence

package.jsonscripts/postinstall.cjsBFRS_AGENTIC_COMPONENTS.md

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json runs scripts/postinstall.cjs during installation.
The postinstall hook proceeds in an installed package unless the skip variable is set; this is an opt-out, not an affirmative consent check.
The hook appends a reference to package-provided guidance in consumer AGENTS.md or CLAUDE.md files.
It also changes consumer package scripts by adding a lint command and prefixing selected build scripts with a lint guard.
The package describes this as installing agent references and wiring its lint guard into the consuming project.

Evidence against

The inspected hook copies first-party component-library guidance and configures a related lint guard; it does not show credential collection, network transfer, or remote code execution.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

Source & flagged code

6 flagged

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

55"postinstall": "node scripts/postinstall.cjs", "dev": "vite --host 0.0.0.0", "build": "npm run build:lib && npm run build:custom-elements && npm run build:demo", "build

Medium

Suspicious Lifecycle Evidence

package.json runs scripts/postinstall.cjs during installation.

package.jsonView on unpkg · L55

scripts/postinstall.cjsView file

35const agentFileGroups = [ L36: ["AGENTS.md", "agents.md"], L37: ["CLAUDE.md", "claude.md"] L38: ]; ... L63: if (!fs.existsSync(filePath)) { L64: fs.writeFileSync(filePath, `${referenceLine}\n`, "utf8"); L65: return "created"; ... L72: L73: fs.writeFileSync(filePath, `${ensureTrailingNewline(existing)}\n${referenceLine}\n`, "utf8"); L74: return "updated"; ... L133: L134: fs.writeFileSync(packageJsonPath, `${JSON.stringify(pkg, null, 2)}\n`, "utf8");

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.cjsView on unpkg · L35

12const skipSetup = process.env.BFRS_AGENTIC_COMPONENTS_SKIP_SETUP === "1"; const packageJsonFileName = "package.json"; const lintScriptName = "check:bfrs-agentic-lint"; const lintSc

Medium

Suspicious Lifecycle Evidence

The postinstall hook proceeds in an installed package unless the skip variable is set; this is an opt-out, not an affirmative consent check.

scripts/postinstall.cjsView on unpkg · L12

dist/fonts.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/fonts.cssView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

55"postinstall": "node scripts/postinstall.cjs", "dev": "vite --host 0.0.0.0", "build": "npm run build:lib && npm run build:custom-elements && npm run build:demo", "build

Medium

Suspicious Lifecycle Evidence

package.json runs scripts/postinstall.cjs during installation.

package.jsonView on unpkg · L55

scripts/postinstall.cjsView file

Findings

1 Critical2 High5 Medium4 Low

CriticalAi Agent Control Hijackscripts/postinstall.cjs

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limiteddist/fonts.css

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSuspicious Lifecycle Evidencepackage.json

MediumSuspicious Lifecycle Evidencescripts/postinstall.cjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @bfrs/agentic-components@0.8.6.

See all versions of @bfrs/agentic-components for other recorded verdicts.

Review the evidence and your use of @bfrs/agentic-components@0.8.6 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 01:55:18.739Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.