registry / @chemx/create-chemx / 26.9.11-362

@chemx/create-chemx@26.9.11-362

Chemical X Protocol: Private drop-in architecture starter kit and capsule generator

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package has no registry install lifecycle hooks, and its flagged control-surface write is transparent, user-invoked scaffolding rather than an unconsented broad agent-control mutation. Network and token features are tied to explicit licensing or audit-sharing operations.

Static reason

No blocking static signals were detected.

Trigger

A user runs the create/scaffold command.

Impact

Creates files in the chosen project directory; no automatic install-time action was found.

Mechanism

User-invoked project scaffolding and optional licensed asset download.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The CLI writes a limited .cursorrules file only after the user runs its scaffold command.
The scaffold command requests a licensed starter kit from the package service before writing the returned files.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
The agent-rule write is explicit create-command behavior, restricted to the newly selected project directory, and contains only line-budget guidance.
GitHub token use is limited to the user-invoked audit sharing feature and sends it to GitHub's API.
No source evidence of hidden execution, secret harvesting, self-dependency, or automatic persistence was found.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 31 file(s), 198 KB of source, external domains: api.github.com, chemicalx.xophz.com, github.com, img.shields.io, mycompassconsulting.com

Source & flagged code

4 flagged

cli/scaffold.jsView file

Lines 27-67javascript

27 if (isDirNonEmpty) {

28 process.stderr.write(`\x1b[31m✕ Error: Directory '${finalDirName}' already exists and is not empty.\x1b[0m\n`);

29 process.exit(1);

30 }

32 const files = await fetchStarterKitFiles(licenseKey);

34 process.stdout.write(`Scaffolding Molecular Architecture into: \x1b[36m${finalDirName}/\x1b[0m\n`);

35 fs.mkdirSync(targetDir, { recursive: true });

37 for (const [relPath, content] of Object.entries(files)) {

38 const fullPath = path.join(targetDir, relPath);

39 const dirName = path.dirname(fullPath);

40 if (!fs.existsSync(dirName)) {

41 fs.mkdirSync(dirName, { recursive: true });

42 }

43 fs.writeFileSync(fullPath, content, 'utf-8');

44 process.stdout.write(` \x1b[32m✔\x1b[0m ${relPath}\n`);

45 }

47 const cursorRulesPath = path.join(targetDir, '.cursorrules');

48 if (!fs.existsSync(cursorRulesPath)) {

49 const rules = '# Chemical X Molecular Architecture Directives\nStrictly follow AGENTS.md rules. Never exceed 500 lines per file. All molecule capsules must stay under 100 lines.\n';

50 fs.writeFileSync(cursorRulesPath, rules, 'utf-8');

51 process.stdout.write(' \x1b[32m✔\x1b[0m .cursorrules\n');

52 }

Low

Ai Review Evidence

The CLI writes a limited .cursorrules file only after the user runs its scaffold command.

cli/scaffold.jsView on unpkg · L47

54 process.stdout.write(

55 `\n\x1b[1m\x1b[32m✔ Molecular Architecture project created successfully at ${finalDirName}!\x1b[0m\n\n`

56 );

57 process.stdout.write('Next Steps:\n');

58 process.stdout.write(` 1. cd ${finalDirName}\n`);

59 process.stdout.write(' 2. Review AGENTS.md for line budgets and architecture standards\n');

60 process.stdout.write(' 3. Run npx chemx generate m-<feature> to create capsules\n');

61 process.stdout.write(' 4. Run npx chemx audit to scan for line budget compliance\n\n');

62};

64export const runInit = async (targetSubDir = 'src/chemical-x', rawArgs = [], onRunAudit = null) => {

65 renderBanner('Chemical X: In-Repo Capsule Drop-in');

67 const targetDir = path.resolve(process.cwd(), targetSubDir);

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import path from 'node:path'; import { hasgum, guminput, promptquestion, renderbanner } from './terminal.js'; import { obtainlicensekey, fetchstarterkitfiles, checkorpromptevaluation } from './license.js'; export const runscaffold = async (projectname, rawargs = [], onrunaudit = null) => { renderbanner('chemical x: molecular architecture scaffolder (npm create chemx)'); const licensekey = await obtainlicensekey(rawargs, onrunaudit); if (!licensekey) { process.stderr.write('\x1b[31m✕ valid license key is required to scaffold blueprints.\x1b[0m\n'); process.exit(1); } let targetname = projectname; if (!targetname) { targetname =

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

cli/license.jsView file

Lines 265-305javascript

265 }

266

267 if (choice === '3') {

268 openBrowser(URL_MASTER);

269 const entered = await promptQuestion

package.jsonView file

Lines 1-21json

2 "name": "@chemx/create-chemx",

3 "version": "26.9.11-362",

4 "description": "Chemical X Protocol: Private drop-in architecture starter kit and capsule generator",

5 "type": "module",

Source & flagged code

4 flagged · loading source

cli/scaffold.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

47const cursorRulesPath = path.join(targetDir, '.cursorrules'); if (!fs.existsSync(cursorRulesPath)) { const rules = '# Chemical X Molecular Architecture Directives\nStrictly follow AGENTS.md rules. Never exceed 500 lines per file. All molecule capsules must stay under 100 lines.\n'; fs.writeFileSync(cursorRulesPath, rules, 'utf-8'); process.stdout.write(' \x1b[32m✔\x1b[0m .cursorrules\n'); }

Low

Ai Review Evidence

The CLI writes a limited .cursorrules file only after the user runs its scaffold command.

cli/scaffold.jsView on unpkg · L47

Findings

1 High2 Medium8 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowAi Review Evidencecli/scaffold.js

LowAi Review Evidencecli/license.js

LowAi Review Evidencepackage.json

Affected versions and remediation

This report applies to @chemx/create-chemx@26.9.11-362.

See all versions of @chemx/create-chemx for other recorded verdicts.

Review the evidence and your use of @chemx/create-chemx@26.9.11-362 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 06:19:05.598Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @chemx

Behavioral surface

Related packages

More from @chemx

Source & flagged code