Loading npm security reports…

@conceptcraft/mindframes@0.3.15: AI-agent control-surface risk | LPM Firewall

registry / @conceptcraft/mindframes / 0.3.15

@conceptcraft/mindframes@0.3.15

CLI tool for creating AI-powered presentations with ConceptCraft

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm installation silently invokes the CLI with force enabled. The CLI detects existing AI-editor configuration directories and writes package-controlled skills and agents into multiple global editor control surfaces.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall

Impact

Package installation can alter behavior/instructions of installed Claude Code, Cursor, Codex, Copilot, OpenCode, Windsurf, and Agent environments.

Mechanism

unconsented forced global AI-agent skill and agent installation

Policy narrative

On npm install, package.json launches bin/postinstall.js. It silently executes the package CLI as `skill install --force`; the CLI defaults to global installation and enumerates existing AI-editor directories. Its installer force-overwrites package-controlled skill files across detected editor control surfaces and writes agent definitions to global Claude, Copilot, and Codex agent directories. This occurs without an explicit user command or consent.

Rationale

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. It meets the firewall block boundary even though the postinstall itself has no observed network exfiltration.

Evidence

package.jsonbin/postinstall.jsbin/cli.jsdist/index.js~/.claude/skills/*~/.cursor/skills/*~/.codex/skills/*~/.claude/agents/*~/.github/agents/*~/.codex/agents/*

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

7L8: import { execSync } from "child_process"; L9: import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L7

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @conceptcraft/mindframes@0.3.2 matchedIdentity = npm:[redacted]:0.3.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

2import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: var h={id:"mindframes",name:"mindframes",displayName:"Mindframes",description:"CLI tool for Mindframes presentation generation",commands:["mf","mindframes"],apiUrl:"https://www.min... L4: `)}function dr(e){let n=[...e].sort((r,i)=>{if(r.isDefault&&!i.isDefault)return-1;if(!r.isDefault&&i.isDefault)return 1;let a=r.createdAt?new Date(r.createdAt).getTime():0;return(i...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

2import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: var h={id:"mindframes",name:"mindframes",displayName:"Mindframes",description:"CLI tool for Mindframes presentation generation",commands:["mf","mindframes"],apiUrl:"https://www.min... L4: `)}function dr(e){let n=[...e].sort((r,i)=>{if(r.isDefault&&!i.isDefault)return-1;if(!r.isDefault&&i.isDefault)return 1;let a=r.createdAt?new Date(r.createdAt).getTime():0;return(i...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L2

Source & flagged code

7 flagged

package.jsonView file

Lines 7-47json

7 "mf": "./bin/cli.js",

8 "mindframes": "./bin/cli.js"

9 },

10 "files": [

11 "bin",

12 "dist",

13 "LICENSE",

14 "README.md"

15 ],

16 "scripts": {

17 "build": "tsup",

18 "dev": "tsup --watch",

19 "cli:staging": "pnpm build && CONCEPTCRAFT_API_URL=https://cc-slides.productcabin.co node bin/cli.js",

20 "cli:local": "pnpm build && CONCEPTCRAFT_API_URL=http://localhost:3000 node bin/cli.js",

21 "cli:smoke": "bash scripts/live-smoke.sh",

22 "lint": "biome lint --write --unsafe",

23 "format": "biome format --write",

24 "typecheck": "tsc --noEmit",

25 "verify:package": "node scripts/verify-package.mjs",

26 "prepublishOnly": "npm run build && npm run verify:package",

27 "postinstall": "node ./bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "vitest run",

29 "test:watch": "vitest",

30 "test:coverage": "vitest run --coverage",

31 "test:e2e": "vitest run --config vitest.e2e.config.ts",

32 "test:integration": "vitest run --config vitest.integration.config.ts",

33 "test:plan": "vitest run --config vitest.integration.config.ts tests/integration/video-plan",

34 "test:all": "vitest run && vitest run --config vitest.e2e.config.ts"

35 },

36 "keywords": [

37 "conceptcraft",

38 "slides",

39 "presentation",

40 "ai",

41 "cli",

42 "powerpoint",

43 "deck",

44 "generator"

45 ],

46 "author": "ConceptCraft AI",

47 "license": "SEE LICENSE IN LICENSE",

bin/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2

3/**

4 * Post-install script

5 * Installs the main skill and recommended external skills

6 */

7

8import { execSync } from "child_process";

9import { fileURLToPath } from "url"

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { createRequire } from 'module'; const require = createRequire(import.meta.url);

3var h={id:"mindframes",name:"mindframes"