Loading npm security reports…

@civitas-cerebrum/achilles@0.1.4: AI-agent control-surface risk | LPM Firewall

registry / @civitas-cerebrum/achilles / 0.1.4

@civitas-cerebrum/achilles@0.1.4

Autonomous quality-assurance methodology — agent skills, harness hooks, return-shape schemas, and post-install plumbing that drive the @civitas-cerebrum/element-interactions framework end-to-end.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation mutates the user-wide Claude Code hook and settings control surface. It installs numerous enforcement hooks and a downloaded executable that affect later agent sessions.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

Unconsented persistence and control over Claude Code tool permissions across projects.

Mechanism

global Claude hook installation, settings registration, and binary download

Policy narrative

On npm install, the package copies its skills and a large hook suite into the user-wide Claude Code directory and writes registrations into ~/.claude/settings.json. Those hooks observe prompts and agent calls and can deny Bash or Write/Edit operations. The same lifecycle script downloads an executable jq release asset to that global hook surface and runs it for version checking without cryptographic integrity verification.

Rationale

This is concrete, unconsented postinstall mutation of a foreign, broad AI-agent control surface, not merely an explicit CLI setup flow. The lifecycle persistence meets the block policy despite the absence of credential exfiltration.

Evidence

package.jsonscripts/postinstall.jshooks/harness-self-protection-guard.shhooks/achilles-protocol-activation-watcher.shhooks/skills/~/.claude/hooks/~/.claude/hooks/bin/jq~/.claude/settings.json<project>/.claude/skills/

Source & flagged code

5 flagged

package.jsonView file

Lines 1-26json

1{

2 "name": "@civitas-cerebrum/achilles",

3 "version": "0.1.4",

4 "description": "Autonomous quality-assurance methodology — agent skills, harness hooks, return-shape schemas, and post-install plumbing that drive the @civitas-cerebrum/element-interactions framework end-to-end.",

5 "scripts": {

6 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L6

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L6

7 "build:validator": "node scripts/build-validator.mjs",

8 "test:hooks": "npm run build:validator && hooks/tests/run.sh",

9 "sync-hooks": "node scripts/sync-hooks.js",

10 "schemas:lint": "node scripts/compile-schemas.mjs && node scripts/validate-schema-fixtures.mjs",

11 "prepack": "npm run schemas:lint && node scripts/lint-doc-drift.mjs && npm run test:hooks"

12 },

13 "bin": {

14 "achilles-self-repair": "bin/self-repair.mjs"

15 },

16 "files": [

17 "bin",

18 "hooks",

19 "skills",

20 "schemas",

21 "scripts/postinstall.js"

22 ],

23 "devDependencies": {

24 "@types/node": "^20.0.0",

25 "esbuild": "^0.25.12",

26 "typescript": "^5.0.0"

hooks/lib/validator.bundle.mjsView file

10271sourceCode = this.opts.code.process(sourceCode, sch); L10272: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L10273: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

hooks/lib/validator.bundle.mjsView on unpkg · L10271

scripts/postinstall.jsView file

Lines 9-49javascript

9// __dirname is `<package>/scripts/` — `packageDir` walks one level up

10// to reach the package root.

11const packageDir = path.resolve(__dirname, '..');

12const skillsDir = path.join(packageDir, 'skills');

hooks/subagent-schema-preread-gate.shView file

•path = hooks/subagent-schema-preread-gate.sh kind = build_helper sizeBytes = 7043 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/subagent-schema-preread-gate.shView on unpkg