registry / @ckelsoe/prompt-architect / 3.3.1

@ckelsoe/prompt-architect@3.3.1

Agent skill for analyzing and improving prompts using 29 frameworks across 7 intent categories. Works with Claude Code, Gemini CLI, Cursor, Copilot, and 30+ Agent Skills compatible tools.

AI Security Review

scanned 17h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. npm postinstall silently installs package-controlled AI-agent skill files into detected user-global agent directories. It can also modify the current project's .windsurfrules when Windsurf is detected.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation in a non-interactive/CI context

Impact

Unconsented persistence of package instructions across broad AI-agent control surfaces.

Mechanism

postinstall copies skills and writes agent instruction files

Policy narrative

Installing the npm package invokes its postinstall hook. In the non-interactive path, the installer detects configured AI tools and recursively replaces package-named skills in user-global Claude, Gemini, and universal Agent Skills directories; it can append its adapter to a project Windsurf rules file. This mutates foreign and broad AI-agent instruction surfaces without an installation choice.

Rationale

The postinstall behavior is concrete, unconsented, and targets multiple external AI-agent control surfaces. No network exfiltration or secondary payload was found, but the lifecycle mutation independently meets the blocking policy.

Evidence

package.jsonscripts/install.jsskills/prompt-architect/SKILL.mdadapters/for-windsurf.mdskills/prompt-architect/~/.claude/skills/prompt-architect/~/.gemini/skills/prompt-architect/~/.agents/skills/prompt-architect/./.windsurfrules

@ckelsoe/prompt-architect@3.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code