Loading npm security reports…

@codyswann/lisa@4.18.0: AI-agent control-surface risk | LPM Firewall

registry / @codyswann/lisa / 4.18.0

@codyswann/lisa@4.18.0

Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package runs a lifecycle script that changes the consuming project's Claude Code plugin state. It automatically adds first- and third-party agent plugins and applies project templates.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm package postinstall in a project with the Claude CLI available

Impact

Unconsented modification of a foreign AI-agent control surface; installed third-party plugins can alter agent capabilities and behavior.

Mechanism

automatic project-scope Claude plugin installation and non-interactive template application

Policy narrative

On installation, package.json launches install-claude-plugins.sh. When Claude is installed locally, that script executes `claude plugin install` at project scope for Lisa and several third-party plugins, and invokes Lisa with `--yes` on the consuming project. This mutates an AI-agent control surface without an explicit user setup command.

Rationale

The package performs unconsented postinstall mutation of the consuming project's Claude Code configuration and installs unrelated third-party agent plugins. This meets the firewall block boundary for a foreign/broad AI-agent control surface.

Evidence

package.jsonscripts/install-claude-plugins.sh.claude/settings.json.claude/.lisa-plugins-synced.safety-net.json$HOME/.codex/.lisa-legacy-plugins-retired

Decision evidence

Source & flagged code

16 flagged · loading source

package.jsonView file

•scripts.postinstall = bash ./scripts/install-claude-plugins.sh || true; node ./scripts/install-generated-artifact-merge-driver.mjs || true; [ -d dist/configs ] || tsc || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = bash ./scripts/install-claude-plugins.sh || true; node ./scripts/install-generated-artifact-merge-driver.mjs || true; [ -d dist/configs ] || tsc || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

harper-fabric/create-only/.github/workflows/deploy.ymlView file

98patternName = generic_password severity = medium line = 98 matchedText = password...}" \

Medium

Secret Pattern

Package contains a possible secret pattern.

harper-fabric/create-only/.github/workflows/deploy.ymlView on unpkg · L98

harper-fabric/copy-overwrite/eslint.config.tsView file

32L33: const require = createRequire(import.meta.url); L34: const __filename = fileURLToPath(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

harper-fabric/copy-overwrite/eslint.config.tsView on unpkg · L32

harper-fabric/create-only/scripts/zap-baseline.shView file

•path = harper-fabric/create-only/scripts/zap-baseline.sh kind = build_helper sizeBytes = 5104 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

harper-fabric/create-only/scripts/zap-baseline.shView on unpkg

plugins/lisa-expo/.codex-plugin/skills/container-view-pattern/scripts/validate_component.pyView file

•path = plugins/lisa-expo/.codex-plugin/skills/container-view-pattern/scripts/validate_component.py kind = payload_in_excluded_dir sizeBytes = 7759 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/lisa-expo/.codex-plugin/skills/container-view-pattern/scripts/validate_component.pyView on unpkg

dist/cli/setup-project.jsView file

•matchType = normalized_sha256 matchedPackage = @codyswann/lisa@3.54.6 matchedPath = dist/cli/setup-project.js matchedIdentity = npm:QGNvZHlzd2Fubi9saXNh:3.54.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/setup-project.jsView on unpkg

dist/cli/ui-automations-adapters.jsView file

•matchType = normalized_sha256 matchedPackage = @codyswann/lisa@3.54.6 matchedPath = dist/cli/ui-automations-adapters.js matchedIdentity = npm:QGNvZHlzd2Fubi9saXNh:3.54.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/ui-automations-adapters.jsView on unpkg

dist/cli/ui-observability-checks.jsView file

•matchType = normalized_sha256 matchedPackage = @codyswann/lisa@3.54.6 matchedPath = dist/cli/ui-observability-checks.js matchedIdentity = npm:QGNvZHlzd2Fubi9saXNh:3.54.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/ui-observability-checks.jsView on unpkg

dist/cli/update-cmd.jsView file

•matchType = normalized_sha256 matchedPackage = @codyswann/lisa@3.54.6 matchedPath = dist/cli/update-cmd.js matchedIdentity = npm:QGNvZHlzd2Fubi9saXNh:3.54.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/update-cmd.jsView on unpkg

dist/core/kane-cli-process.jsView file

•matchType = normalized_sha256 matchedPackage = @codyswann/lisa@3.54.6 matchedPath = dist/core/kane-cli-process.js matchedIdentity = npm:QGNvZHlzd2Fubi9saXNh:3.54.6 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/core/kane-cli-process.jsView on unpkg

plugins/lisa-wiki-copilot/scripts/wiki-safety.mjsView file

14patternName = generic_password severity = medium line = 14 matchedText = password...D]",

Medium

Secret Pattern

Hardcoded password in plugins/lisa-wiki-copilot/scripts/wiki-safety.mjs

plugins/lisa-wiki-copilot/scripts/wiki-safety.mjsView on unpkg · L14

plugins/lisa-wiki/scripts/wiki-safety.mjsView file

14patternName = generic_password severity = medium line = 14 matchedText = password...D]",

Medium

Secret Pattern

Hardcoded password in plugins/lisa-wiki/scripts/wiki-safety.mjs

plugins/lisa-wiki/scripts/wiki-safety.mjsView on unpkg · L14

plugins/lisa-wiki-agy/scripts/wiki-safety.mjsView file

14patternName = generic_password severity = medium line = 14 matchedText = password...D]",

Medium

Secret Pattern

Hardcoded password in plugins/lisa-wiki-agy/scripts/wiki-safety.mjs

plugins/lisa-wiki-agy/scripts/wiki-safety.mjsView on unpkg · L14

plugins/lisa-wiki-cursor/scripts/wiki-safety.mjsView file

14patternName = generic_password severity = medium line = 14 matchedText = password...D]",

Medium

Secret Pattern

Hardcoded password in plugins/lisa-wiki-cursor/scripts/wiki-safety.mjs

plugins/lisa-wiki-cursor/scripts/wiki-safety.mjsView on unpkg · L14

plugins/src/wiki/scripts/wiki-safety.mjsView file

14patternName = generic_password severity = medium line = 14 matchedText = password...D]",

Medium

Secret Pattern

Hardcoded password in plugins/src/wiki/scripts/wiki-safety.mjs

plugins/src/wiki/scripts/wiki-safety.mjsView on unpkg · L14