@chemx/create-chemx@26.9.14-1358
Chemical X Protocol: Private drop-in architecture starter kit and capsule generator
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe package contains a concrete, user-invoked feature that writes behavior-bearing guidance into AGENTS.md, so it merits a warning under the agent integration policy. No unconsented install-time mutation or separate concrete attack behavior was established.
Static reason
No blocking static signals were detected.; source closely matched a different package identity; previous stored version diff introduced dangerous source
Trigger
A user selects the query-machine setup in the installer wizard or invokes its explicit navigator action.
Impact
This changes project guidance for AI agents and promotes the package's own tooling. The guarded, user-invoked setup does not establish an unconsented control hijack.
Mechanism
The setup appends a directive asking AI agents to run this package's search command before broad searches, provided the file does not already contain the directive.
AI rationale
The package contains a concrete, user-invoked feature that writes behavior-bearing guidance into AGENTS.md, so it merits a warning under the agent integration policy. No unconsented install-time mutation or separate concrete attack behavior was established.
Evidence
AGENTS.md
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a CLI and declares no install lifecycle hook in package.json.
- The installer can append a search-first directive to a project's AGENTS.md file.
- The AGENTS.md write is reached through an installer wizard choice or an explicit query-machine action.
- The directive steers AI agents to use this package's search command before broad searches.
Evidence against
- The manifest's entrypoints are CLI commands; package installation alone does not trigger the agent configuration write.
- The wizard presents selectable installation options, including query-machine-only and cancel.
- The AGENTS.md change is limited to a named directive and only appends when that directive is absent.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcecli/navigator-share.jsView file
2import path from 'node:path';
L3: import { spawnSync } from 'node:child_process';
L4: import {
High
Child Process
Package source references child process execution.
cli/navigator-share.jsView on unpkg · L2cli/terminal.jsView file
10} else if (platform === "win32") {
L11: spawnSync("cmd.exe", ["/c", "start", '""', url], { stdio: "ignore", timeout: 3000 });
L12: } else {
High
cli/license.jsView file
3import os from 'node:os';
L4: import { spawnSync } from 'node:child_process';
L5: import {
...
L17:
L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
L19: export const GATEKEEPER_API_URL = process.env.COMPASS_GATEKEEPER_URL || 'https://mycompassconsulting.com/wp-json/compass/v1/gatekeeper';
Findings
6 High2 Medium4 Low
HighChild Processcli/navigator-share.js
HighShellcli/terminal.js
HighSame File Env Network Executioncli/license.js
HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js
HighPackage Source Clone Identity Mismatchcli/audit/social-git.js
HighPrevious Version Dangerous Deltacli/license.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @chemx/create-chemx@26.9.14-1358.
See all versions of @chemx/create-chemx for other recorded verdicts.
- Review the evidence and your use of @chemx/create-chemx@26.9.14-1358 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.