@ciandt-flow/flow-ai-obs@0.12.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@ciandt-flow/flow-ai-obs@0.12.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

1'use strict';var child_process=require('child_process'),util=require('util'),R=require('fs'),M=require('path'),me=require('os'),Je=require('https'),Ke=require('http'),crypto=requir... L2: `;try{R.writeFileSync(We,e,{flag:"a"});}catch(r){process.stderr.write(`[flow-obs debug ERROR] ${r.message}

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

1'use strict';var child_process=require('child_process'),util=require('util'),R=require('fs'),M=require('path'),me=require('os'),Je=require('https'),Ke=require('http'),crypto=requir... L2: `;try{R.writeFileSync(We,e,{flag:"a"});}catch(r){process.stderr.write(`[flow-obs debug ERROR] ${r.message}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

1'use strict';var child_process=require('child_process'),util=require('util'),R=require('fs'),M=require('path'),me=require('os'),Je=require('https'),Ke=require('http'),crypto=requir... L2: `;try{R.writeFileSync(We,e,{flag:"a"});}catch(r){process.stderr.write(`[flow-obs debug ERROR] ${r.message}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

1Trigger-reachable command-output exfiltration chain: manifest.main -> dist/index.js L1: 'use strict';var child_process=require('child_process'),util=require('util'),R=require('fs'),M=require('path'),me=require('os'),Je=require('https'),Ke=require('http'),crypto=requir... L2: `;try{R.writeFileSync(We,e,{flag:"a"});}catch(r){process.stderr.write(`[flow-obs debug ERROR] ${r.message}

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L1

dist/cli.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: 'use strict';var ve=require('readline/promises'),ls=require('https'),k=require('fs'),ht=require('os'),Pt=require('path'),child_process=require('child_process'),vs=require('http'),u... `);}catch(s){throw n.close(),s}if(n.close(),e!==void 0)return e;throw new Error("Too many invalid attempts for yes/no prompt")}async function _n(t,e){let n=ve__namespace.createInte... `);let n=child_process.spawn("npm",["install","-g",`${e}@${t}`],{detached:true,stdio:"ignore",shell:process.platform==="win32",windowsHide:true});n.on("error",()=>{}),n.unref();}as... `);}n();}}r.on("close",(s,a)=>i(s===0,a??void 0)),r.on("error",s=>i(false,s.co

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/cli.jsView on unpkg

1#!/usr/bin/env node L2: 'use strict';var ve=require('readline/promises'),ls=require('https'),k=require('fs'),ht=require('os'),Pt=require('path'),child_process=require('child_process'),vs=require('http'),u... L3: `);}catch(s){throw n.close(),s}if(n.close(),e!==void 0)return e;throw new Error("Too many invalid attempts for yes/no prompt")}async function _n(t,e){let n=ve__namespace.createInte... L4: \u256D${s}\u256E ... L11: L12: `);let n=child_process.spawn("npm",["install","-g",`${e}@${t}`],{detached:true,stdio:"ignore",shell:process.platform==="win32",windowsHide:true});n.on("error",()=>{}),n.unref();}as... L13: \u256D${u}\u256E ... L30: `)+` L31: `),1}var ue=g(()=>{"use strict";ut();});function Pn(){if(process.platform==="linux"&&process.getuid?.()===0&&process.env.SUDO_USER){let e=c

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L1

Source & flagged code

10 flagged

package.jsonView file

Lines 1-38json

1{

2 "name": "@ciandt-flow/flow-ai-obs",

3 "version": "0.12.0",

4 "description": "Claude Code hooks for Langfuse OTLP tracing — cross-platform",

5 "main": "dist/index.js",

6 "bin": {

7 "flow-ai-obs": "dist/cli.js",

8 "flow-ai-obs-setup": "dist/setup.js"

9 },

10 "scripts": {

11 "build": "tsup",

12 "test": "jest",

13 "typecheck": "tsc --noEmit",

14 "lint": "eslint src bin scripts",

15 "format": "prettier --write \"src/**/*.ts\" \"bin/**/*.ts\" \"scripts/**/*.ts\"",

16 "format:check": "prettier --check \"src/**/*.ts\" \"bin/**/*.ts\" \"scripts/**/*.ts\"",

17 "security-scan": "trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",

18 "postinstall": "node -e \"require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})\"",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 "prepublishOnly": "npm run security-scan && npm run build",

20 "release:npm": "changeset publish",

21 "changeset": "changeset",

22 "version-packages": "changeset version",

23 "install:hooks": "node dist/cli.js install",

24 "auth:login": "node dist/cli.js auth login",

25 "auth:logout": "node dist/cli.js auth logout",

26 "auth:status": "node dist/cli.js auth status",

27 "smoke": "bash scripts/smoke-test.sh",

28 "smoke:debug": "bash scripts/smoke-test.sh --debug",

29 "smoke:send": "bash scripts/smoke-test.sh --send --allow-http --debug",

30 "regression": "jest --config jest.regression.config.js --forceExit",

31 "regression:update": "UPDATE_GOLDEN=1 jest --config jest.regression.config.js --forceExit"

32 },

33 "files": [

34 "dist/",

35 "README.md",

36 "LICENSE.md"

37 ],

38 "keywords": [

dist/index.jsView file

Lines 1-16javascript

1'use strict';var child_process=require('child_process'),util=require('util'),R=require('fs'),M=require('path'),me=require(

dist/cli.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2'use strict';var ve=require('readline/promises'),ls=require('https'),k=require('fs'),ht=require('os'),Pt=require(