registry / @chem-x/starter-kit / 26.10.10-75
@chem-x/starter-kit@26.10.10-75
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe manifest’s postinstall hook leads to a script that only prints a hint. The flagged wizard and edit paths are user-invoked and guarded, so the source inspected does not establish an install-time attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation invokes the postinstall script; project configuration changes require an explicit CLI wizard or installer action.
Impact
No unconsented agent-control mutation, credential exposure, or other concrete attack surface was established.
Mechanism
The postinstall script checks direct execution and writes a short hint to stderr. The wizard writes planned project files only when invoked with write enabled and no refusals.
AI rationale
The manifest’s postinstall hook leads to a script that only prints a hint. The flagged wizard and edit paths are user-invoked and guarded, so the source inspected does not establish an install-time attack.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The install hook is `node cli/postinstall.js`.
- The hook prints a hint only when directly run; its source shows no configuration writes or network requests.
- Agent and project configuration writes require explicit wizard or installer execution; the wizard applies writes only outside dry-run and absent refusals.
- The edit gate validates workspace containment and file locks before edits.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node cli/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node cli/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli/forge/fuzz/seeds.js#virtual:string-array:round1View file
21FN("export function host(d, o, f) { switch (d) { case 1: const k = o.x; f(k); case 2: return k; } }", "const k = 7; export function host(d, o, f) { switch (d) { case 1: f(o.x); cas...
L22: FN(fnBody("const y = 5; const k = eval; return k('typeof y');", ""), fnBody("const y = 5; return eval('typeof y');", "")),
L23: FN(fnBody("const n = u.name; return u && n;", "u"), fnBody("return u && u.name;", "u")),
Findings
3 High7 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/pillars-wizard.js
HighSemantic Analysis Limitedcli/apply-edits.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirecli/network-recorder.fixture.mjs
MediumUnsafe Vm Contextcli/forge/fuzz/template-oracle.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/pre-commit.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalcli/forge/fuzz/seeds.js#virtual:string-array:round1
Affected versions and remediation
This report applies to @chem-x/starter-kit@26.10.10-75.
See all versions of @chem-x/starter-kit for other recorded verdicts.
- Review the evidence and your use of @chem-x/starter-kit@26.10.10-75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.