@chem-x/create-chemx@26.9.16-668
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe explicit agent configuration setup is a guarded, package-owned capability and merits a warning. No concrete malicious install behavior was established, and the declared postinstall file was absent from the inspected package snapshot.
Static reason
One or more suspicious static signals were detected.; source closely matched a different package identity
Trigger
A user selects an installer option or runs the MCP installation command.
Impact
This changes later agent guidance and enables the configured package MCP server; no install-time attack was established.
Mechanism
The installer writes package scripts and agent-facing configuration into the selected project.
AI rationale
The explicit agent configuration setup is a guarded, package-owned capability and merits a warning. No concrete malicious install behavior was established, and the declared postinstall file was absent from the inspected package snapshot.
Evidence
cli/installer.jscli/mcp/installer.jscli/mcp/index.jsAGENTS.md.cursor/mcp.json
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The interactive installer offers optional MCP configuration and an agent query setup that adds a search directive to AGENTS.md.
- The MCP installer writes a Chemical X server entry into project Cursor configuration; the explicit MCP command invokes that installer.
- The manifest declares a postinstall command whose referenced scripts/postinstall.mjs file is absent from this package snapshot.
Evidence against
- Agent and MCP configuration changes are exposed through interactive installer choices or an explicit MCP command, not proven to run during package installation.
- The manifest ships the cli directory, while the declared postinstall script file is absent; no postinstall mutation behavior was found.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli/audit-preflight-git.jsView file
1import fs from 'node:fs';
L2: import { spawnSync } from 'node:child_process';
L3:
High
Child Process
Package source references child process execution.
cli/audit-preflight-git.jsView on unpkg · L1Findings
6 High4 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processcli/audit-preflight-git.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
HighPackage Source Clone Identity Mismatchcli/audit/social-git.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @chem-x/create-chemx@26.9.16-668.
See all versions of @chem-x/create-chemx for other recorded verdicts.
- Review the evidence and your use of @chem-x/create-chemx@26.9.16-668 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.