registry / @chemx/starter-kit / 26.9.16-668

@chemx/starter-kit@26.9.16-668

Chemical X Protocol: Private drop-in architecture starter kit and capsule generator

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The manifest names a postinstall script that is absent from the package snapshot. Inspected agent and MCP configuration is activated through explicit CLI setup, and the remaining flagged process and network behavior serves audit, terminal, or license functions.

Static reason

One or more suspicious static signals were detected.

Trigger

A user explicitly invokes the hook/setup command or runs the project scaffolder.

Impact

These actions change the selected project configuration, but inspected source does not show unconsented install-time mutation or a concrete attack.

Mechanism

The setup flow can add a search directive to an existing AGENTS.md and write project-local MCP configuration. The manifest's postinstall target is not present in the inspected package files.

AI rationale

Evidence

AGENTS.md.cursor/mcp.json.vscode/mcp.jsonpackage.json.cursorrules

Network endpoints2

chemicalx.xophz.commycompassconsulting.com

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json points postinstall to scripts/postinstall.mjs, which is absent from the published file set; no install-time agent configuration implementation is present in the snapshot.
The installer exposes agent and MCP configuration through an explicitly invoked wizard, and the CLI reaches it through hook/setup commands.
The installer adds its search directive only to an existing AGENTS.md when the user selects the query setup; the scaffold writes project rules only when creating a project.
MCP configuration writes project-local Cursor and VS Code files and is invoked by the setup wizard.
The MCP test creates those project-local files and checks the configured server entry.
The audit preflight uses git status to identify changed files.
The terminal child processes open a supplied URL or invoke gum for terminal prompts and display.
License validation sends the supplied license key and generated device ID to the configured product API.

Evidence against

The manifest declares an install-time postinstall hook, but its target script is absent from this package snapshot.
The installer can add AI-agent directives and MCP configuration to a consumer project, but the inspected caller is an explicit setup wizard.

Source & flagged code

6 flagged

package.jsonView file

Lines 32-71json

32 ".": "./cli/index.js",

33 "./audit": "./cli/audit.js",

34 "./build": "./cli/build.js",

35 "./search": "./cli/search.js",

36 "./mcp": "./cli/mcp/index.js",

37 "./reader": "./cli/reader.js",

38 "./patcher": "./cli/patcher.js"

39 },

40 "scripts": {

41 "publish:both": "node scripts/publish-both.mjs",

42 "test": "node --test cli/audit/*.spec.js cli/mcp/*.spec.js cli/*.spec.js",

43 "typecheck": "tsc --noEmit",

44 "create-capsule": "node cli/index.js",

45 "audit": "node cli/index.js audit",

46 "ci:audit": "node cli/index.js audit --ci --dir=cli",

47 "chemx": "node cli/index.js",

48 "q": "node cli/index.js q",

49 "search": "node cli/index.js search",

50 "mcp": "node cli/index.js mcp",

51 "install-mcp": "node cli/index.js install-mcp",

52 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L52

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L52

53 "read": "node cli/index.js read",

54 "patch": "node cli/index.js patch"

55 },

56 "dependencies": {

57 "@babel/parser": "^7.29.8",

58 "@babel/traverse": "^7.29.8",

59 "@babel/types": "^7.29.8",

60 "react": "^18.3.1",

61 "react-dom": "^18.3.1"

62 },

63 "devDependencies": {

64 "@types/babel__traverse": "^7.28.0",

65 "@types/node": "^22.20.2",

66 "@types/react": "^18.3.31",

67 "@types/react-dom": "^18.3.7",

68 "typescript": "^5.9.3"

69 }

70}

cli/audit-preflight-git.jsView file

1import fs from 'node:fs'; L2: import { spawnSync } from 'node:child_process'; L3:

High

Child Process

Package source references child process execution.

cli/audit-preflight-git.jsView on unpkg · L1

cli/terminal.jsView file

Lines 1-30javascript

1import readline from "node:readline";

2import { spawnSync } from "node:child_process";

3import { formatChemicalXGradient, ANSI } from "./theme.js";

5export const openBrowser

cli/license.jsView file

3import os from 'node:os'; L4: import { spawnSync } from 'node:child_process'; L5: import { ... L17: L18: export const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com'; L19: export const GATEKEEPER_API_URL = process.env.COMPASS_GATEKEEPER_URL || 'https://mycompassconsulting.com/wp-json/compass/v1/gatekeeper';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

cli/license.jsView on unpkg · L3

cli/scaffold.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import fs from 'node:fs'; import path from 'node:path'; import { hasgum, guminput, promptquestion, renderbanner } from './terminal.js'; import { obtainlicensekey, fetchstarterkitfiles, loadlocalblueprintfiles } from './license.js'; export const runscaffold = async (projectname, rawargs = [], onrunaudit = null) => { renderbanner('chemical x: molecular architecture scaffolder (npm create chemx)'); const licensekey = await obtainlicensekey(rawargs, onrunaudit); let iscommunity = false; let files = {}; if (!licensekey) { process.stdout.write( '\n\x1b[38;2;98;201;255m⚡ chemical x: community edition (free)\x1b[0m\n' + 'the community version is free because

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

cli/scaffold.jsView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cli/audit-preflight-git.jsView file

1import fs from 'node:fs'; L2: import { spawnSync } from 'node:child_process'; L3:

High

Child Process

Package source references child process execution.

cli/audit-preflight-git.jsView on unpkg · L1

Findings

5 High4 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processcli/audit-preflight-git.js

HighShellcli/terminal.js

HighSame File Env Network Executioncli/license.js

HighTrigger Reachable External Ai Agent Control Surface Mutationcli/scaffold.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @chemx/starter-kit@26.9.16-668.

See all versions of @chemx/starter-kit for other recorded verdicts.

Review the evidence and your use of @chemx/starter-kit@26.9.16-668 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 06:19:04.920Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @chemx

Behavioral surface

Related packages

More from @chemx

Source & flagged code