registry / @cakejp/design-system / 0.21.0
@cakejp/design-system@0.21.0
Cake.jp Design System — UI コンポーネント・カラートークン・タイポグラフィ
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe package automatically writes project-level AI instructions during postinstall, so it warrants a warning for agent setup lifecycle risk. The inspected behavior is limited to package-owned design guidance and does not establish broad control hijacking or another confirmed attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Package installation runs the postinstall hook with an identifiable consumer project root.
Impact
The added instructions influence AI assistant behavior for UI work by directing assistants to read this package’s guidance.
Mechanism
The initializer copies package-owned AGENTS and CLAUDE stubs into the consumer project root, skipping files that already exist unless force is supplied.
AI rationale
The package automatically writes project-level AI instructions during postinstall, so it warrants a warning for agent setup lifecycle risk. The inspected behavior is limited to package-owned design guidance and does not establish broad control hijacking or another confirmed attack.
Evidence
package.jsonbin/init.jstemplates/AGENTS.stub.mdtemplates/CLAUDE.stub.md
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package postinstall hook runs its initializer in postinstall mode.
- The initializer uses the install directory and skips when install context is missing or points to the package itself.
- During postinstall, the initializer targets project-root AGENTS.md and CLAUDE.md files and copies package-owned templates.
- Existing target files are skipped unless force is supplied.
- The generated files tell AI assistants to load this package’s design-system guidance before UI work.
Evidence against
Behavioral surface
DynamicRequireEnvironmentVarsFilesystem
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/init.js postinstall
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./bin/init.js postinstall
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/init.jsView file
5// AI エージェントは node_modules 配下のファイルを自動で読まないため、
L6: // プロジェクトルートに AGENTS.md / CLAUDE.md（node_modules 内の DS 利用ガイドを
L7: // 参照する薄いポインタ）を置く必要がある。
...
L9: // Usage:
L10: // npx cakejp-ds init # AGENTS.md + CLAUDE.md を設置
L11: // npx cakejp-ds init --force # 既存ファイルを上書き
...
L13:
L14: import { copyFileSync, existsSync, readFileSync, realpathSync, readdirSync } from "node:fs"
L15: import { dirname, join, resolve, sep } from "node:path"
...
L270: // consumer へ設置するのは「正本を参照するポインタ」だけ（issue #87 / #263）。
L271: // ルール本文（templates/AGENTS.md / CLAUDE.md）は package 内に置いたまま読ませる。
L272: // 本文をコピーすると、DS 側の更新が既存 consumer へ二度と届かない
Findings
1 Critical2 High4 Medium7 Low
CriticalAi Agent Control Hijackbin/init.js
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/index.css
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirebin/init.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @cakejp/design-system@0.21.0.
See all versions of @cakejp/design-system for other recorded verdicts.
- Review the evidence and your use of @cakejp/design-system@0.21.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.