registry / @chemx/create-chemx / 26.10.10-75
@chemx/create-chemx@26.10.10-75
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe postinstall lifecycle is limited to printing a hint, while configuration writes are gated behind explicit wizard use and edit paths are workspace constrained. The scanner’s lifecycle and agent configuration signals do not establish an unconsented install-time attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation triggers the declared postinstall script; project configuration changes require explicit wizard invocation.
Impact
No confirmed covert mutation, exfiltration, or other attack surface was established from these inspected paths.
Mechanism
Postinstall emits a setup hint. The wizard applies project writes only outside dry-run mode and when no write refusal exists; edit operations resolve paths within the workspace.
AI rationale
The postinstall lifecycle is limited to printing a hint, while configuration writes are gated behind explicit wizard use and edit paths are workspace constrained. The scanner’s lifecycle and agent configuration signals do not establish an unconsented install-time attack.
Evidence
package.jsoncli/postinstall.jscli/pillars-wizard.jscli/apply-edits.js
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package postinstall invokes a script that only prints a hint when run directly; it does not perform configuration writes.
- The wizard writes project settings only when explicitly invoked with write enabled, and skips writes for dry runs or refused plans.
- The edit utility constrains edit paths to the workspace and validates changes before commit.
Evidence against
- The wizard can write configuration and host shim files into a project when explicitly run with write enabled.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node cli/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node cli/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli/forge/fuzz/seeds.js#virtual:string-array:round1View file
21FN("export function host(d, o, f) { switch (d) { case 1: const k = o.x; f(k); case 2: return k; } }", "const k = 7; export function host(d, o, f) { switch (d) { case 1: f(o.x); cas...
L22: FN(fnBody("const y = 5; const k = eval; return k('typeof y');", ""), fnBody("const y = 5; return eval('typeof y');", "")),
L23: FN(fnBody("const n = u.name; return u && n;", "u"), fnBody("return u && u.name;", "u")),
Findings
3 High7 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/pillars-wizard.js
HighSemantic Analysis Limitedcli/apply-edits.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirecli/network-recorder.fixture.mjs
MediumUnsafe Vm Contextcli/forge/fuzz/template-oracle.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/pre-commit.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalcli/forge/fuzz/seeds.js#virtual:string-array:round1
Affected versions and remediation
This report applies to @chemx/create-chemx@26.10.10-75.
See all versions of @chemx/create-chemx for other recorded verdicts.
- Review the evidence and your use of @chemx/create-chemx@26.10.10-75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.