Loading npm security reports…

@conceptcraft/mindframes@0.3.14: AI-agent control-surface risk | LPM Firewall

registry / @conceptcraft/mindframes / 0.3.14

@conceptcraft/mindframes@0.3.14

CLI tool for creating AI-powered presentations with ConceptCraft

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time code silently installs and forcibly overwrites AI-agent skills. It writes to multiple user-home AI assistant control surfaces, including Claude Code, Codex, Cursor, and GitHub Copilot.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm installation, via the postinstall lifecycle hook.

Impact

Modifies broad, foreign AI-agent configuration/control surfaces and can alter future agent behavior.

Mechanism

Unconsented forced AI-agent skill and agent-file installation.

Policy narrative

On npm install, package.json invokes bin/postinstall.js. That hook silently executes the package CLI with `skill install --force`; the bundled CLI writes skill content to detected AI-editor directories and creates agent files in ~/.claude, ~/.github, and ~/.codex. This is an unconsented install-time mutation of broad third-party AI-agent control surfaces.

Rationale

The install hook performs forced, silent writes to foreign AI-assistant configuration locations without an explicit user command. This meets the firewall block policy for unconsented postinstall AI-agent control-surface mutation.

Evidence

package.jsonbin/postinstall.jsbin/cli.jsdist/index.js~/.claude/skills/*/SKILL.md~/.cursor/skills/*/SKILL.md~/.codex/skills/*/SKILL.md~/.claude/agents/*~/.github/agents/*~/.codex/agents/*

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

7L8: import { execSync } from "child_process"; L9: import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L7

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @conceptcraft/mindframes@0.3.2 matchedIdentity = npm:[redacted]:0.3.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

2import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: var h={id:"mindframes",name:"mindframes",displayName:"Mindframes",description:"CLI tool for Mindframes presentation generation",commands:["mf","mindframes"],apiUrl:"https://www.min... L4: `)}function dr(e){let n=[...e].sort((r,i)=>{if(r.isDefault&&!i.isDefault)return-1;if(!r.isDefault&&i.isDefault)return 1;let a=r.createdAt?new Date(r.createdAt).getTime():0;return(i...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

2import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: var h={id:"mindframes",name:"mindframes",displayName:"Mindframes",description:"CLI tool for Mindframes presentation generation",commands:["mf","mindframes"],apiUrl:"https://www.min... L4: `)}function dr(e){let n=[...e].sort((r,i)=>{if(r.isDefault&&!i.isDefault)return-1;if(!r.isDefault&&i.isDefault)return 1;let a=r.createdAt?new Date(r.createdAt).getTime():0;return(i...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L2

Source & flagged code

7 flagged

package.jsonView file

Lines 7-47json

7 "mf": "./bin/cli.js",

8 "mindframes": "./bin/cli.js"

9 },

10 "files": [

11 "bin",

12 "dist",

13 "LICENSE",

14 "README.md"

15 ],

16 "scripts": {

17 "build": "tsup",

18 "dev": "tsup --watch",

19 "cli:staging": "pnpm build && CONCEPTCRAFT_API_URL=https://cc-slides.productcabin.co node bin/cli.js",

20 "cli:local": "pnpm build && CONCEPTCRAFT_API_URL=http://localhost:3000 node bin/cli.js",

21 "cli:smoke": "bash scripts/live-smoke.sh",

22 "lint": "biome lint --write --unsafe",

23 "format": "biome format --write",

24 "typecheck": "tsc --noEmit",

25 "verify:package": "node scripts/verify-package.mjs",

26 "prepublishOnly": "npm run build && npm run verify:package",

27 "postinstall": "node ./bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "vitest run",

29 "test:watch": "vitest",

30 "test:coverage": "vitest run --coverage",

31 "test:e2e": "vitest run --config vitest.e2e.config.ts",

32 "test:integration": "vitest run --config vitest.integration.config.ts",

33 "test:plan": "vitest run --config vitest.integration.config.ts tests/integration/video-plan",

34 "test:all": "vitest run && vitest run --config vitest.e2e.config.ts"

35 },

36 "keywords": [

37 "conceptcraft",

38 "slides",

39 "presentation",

40 "ai",

41 "cli",

42 "powerpoint",

43 "deck",

44 "generator"

45 ],

46 "author": "ConceptCraft AI",

47 "license": "SEE LICENSE IN LICENSE",

bin/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2

3/**

4 * Post-install script

5 * Installs the main skill and recommended external skills

6 */

7

8import { execSync } from "child_process";

9import { fileURLToPath } from "url"

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { createRequire } from 'module'; const require = createRequire(import.meta.url);

3var h={id:"mindframes",name:"mindframes"