@chem-x/create-chemx@26.9.14-205
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe source supports a warning for explicit-user-command agent configuration mutation: the invoked scaffolder writes a project-level Cursor rules file. The inspected source shows no automatic install hook or confirmed attack behavior.
Static reason
No blocking static signals were detected.; source closely matched a different package identity; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI create/scaffold flow.
Impact
The project receives instructions that can affect Cursor behavior; the inspected code does not establish an unconsented or malicious action.
Mechanism
The scaffolder creates a project directory and writes a .cursorrules file if one is absent.
AI rationale
The source supports a warning for explicit-user-command agent configuration mutation: the invoked scaffolder writes a project-level Cursor rules file. The inspected source shows no automatic install hook or confirmed attack behavior.
Evidence
cli/index.jscli/scaffold.js.cursorrules
Network endpoints1
chemicalx.xophz.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest has no preinstall, install, or postinstall hook.
- The CLI calls the scaffolder when a user invokes its create command.
- The scaffolder writes a project-level Cursor rules file with product-specific instructions.
- License keys are sent to the configured Chemical X starter-kit endpoint during licensed setup.
Evidence against
- The flagged file writes occur during explicit CLI setup; the inspected source does not show an automatic install-time write.
- The GitHub API request uses a supplied token for the requested repository discussion.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcecli/navigator-share.jsView file
2import path from 'node:path';
L3: import { spawnSync } from 'node:child_process';
L4: import {
High
Child Process
Package source references child process execution.
cli/navigator-share.jsView on unpkg · L2cli/terminal.jsView file
10} else if (platform === "win32") {
L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore", timeout: 3000 });
L12: } else {
High
cli/license.jsView file
3import os from 'node:os';
L4: import { spawnSync } from 'node:child_process';
L5: import {
...
L17:
L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
L19: export const GATEKEEPER_API_URL = process.env.COMPASS_GATEKEEPER_URL || 'https://mycompassconsulting.com/wp-json/compass/v1/gatekeeper';
Findings
6 High2 Medium5 Low
HighChild Processcli/navigator-share.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
HighPackage Source Clone Identity Mismatchcli/audit/social-git.js
HighPrevious Version Dangerous Deltacli/audit/social-git.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @chem-x/create-chemx@26.9.14-205.
See all versions of @chem-x/create-chemx for other recorded verdicts.
- Review the evidence and your use of @chem-x/create-chemx@26.9.14-205 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.