Loading npm security reports…

@conceptcraft/mindframes@0.3.16: AI-agent control-surface risk | LPM Firewall

registry / @conceptcraft/mindframes / 0.3.16

@conceptcraft/mindframes@0.3.16

CLI tool for creating AI-powered presentations with ConceptCraft

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package runs an unprompted forced AI-agent skill installation. It writes package-generated instructions into several user-home agent directories.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm installation invokes postinstall.

Impact

Existing or new Claude Code, GitHub Copilot, and Codex agent configuration can be altered without user approval.

Mechanism

Forced writes to AI coding-assistant agent directories through the package CLI.

Policy narrative

On installation, package.json starts bin/postinstall.js. That script suppresses errors and runs the bundled CLI with skill install --force. The CLI selects home-directory AI-assistant integrations and creates or overwrites agent files for Claude Code, GitHub Copilot, and Codex. This is an unconsented install-time mutation of broad external AI-agent control surfaces.

Rationale

The package performs forced, silent postinstall writes to multiple foreign AI-agent configuration locations. This meets the blocking policy for unconsented lifecycle mutation of a broad AI-agent control surface.

Evidence

package.jsonbin/postinstall.jsbin/cli.jsdist/index.js~/.claude/agents~/.github/agents~/.codex/agents

Decision evidence

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/postinstall.jsView file

7L8: import { execSync } from "child_process"; L9: import { fileURLToPath } from "url";

High

Child Process

Package source references child process execution.

bin/postinstall.jsView on unpkg · L7

•matchType = normalized_sha256 matchedPackage = @conceptcraft/mindframes@0.3.15 matchedPath = bin/postinstall.js matchedIdentity = npm:[redacted]:0.3.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/postinstall.jsView on unpkg

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @conceptcraft/mindframes@0.3.2 matchedIdentity = npm:[redacted]:0.3.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

2import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: var f={id:"mindframes",name:"mindframes",displayName:"Mindframes",description:"CLI tool for Mindframes presentation generation",commands:["mf","mindframes"],apiUrl:"https://www.min... L4: `)}function Vo(e){let t=[...e].sort((o,i)=>{if(o.isDefault&&!i.isDefault)return-1;if(!o.isDefault&&i.isDefault)return 1;let a=o.createdAt?new Date(o.createdAt).getTime():0;return(i...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

2import { createRequire } from 'module'; const require = createRequire(import.meta.url); L3: var f={id:"mindframes",name:"mindframes",displayName:"Mindframes",description:"CLI tool for Mindframes presentation generation",commands:["mf","mindframes"],apiUrl:"https://www.min... L4: `)}function Vo(e){let t=[...e].sort((o,i)=>{if(o.isDefault&&!i.isDefault)return-1;if(!o.isDefault&&i.isDefault)return 1;let a=o.createdAt?new Date(o.createdAt).getTime():0;return(i...

High

Source & flagged code

9 flagged

package.jsonView file

Lines 7-47json

7 "mf": "./bin/cli.js",

8 "mindframes": "./bin/cli.js"

9 },

10 "files": [

11 "bin",

12 "dist",

13 "LICENSE",

14 "README.md"

15 ],

16 "scripts": {

17 "build": "tsup",

18 "dev": "tsup --watch",

19 "cli:staging": "pnpm build && CONCEPTCRAFT_API_URL=https://cc-slides.productcabin.co node bin/cli.js",

20 "cli:local": "pnpm build && CONCEPTCRAFT_API_URL=http://localhost:3000 node bin/cli.js",

21 "cli:smoke": "bash scripts/live-smoke.sh",

22 "lint": "biome lint --write --unsafe",

23 "format": "biome format --write",

24 "typecheck": "tsc --noEmit",

25 "verify:package": "node scripts/verify-package.mjs",

26 "prepublishOnly": "npm run build && npm run verify:package",

27 "postinstall": "node ./bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "vitest run",

29 "test:watch": "vitest",

30 "test:coverage": "vitest run --coverage",

31 "test:e2e": "vitest run --config vitest.e2e.config.ts",

32 "test:integration": "vitest run --config vitest.integration.config.ts",

33 "test:plan": "vitest run --config vitest.integration.config.ts tests/integration/video-plan",

34 "test:all": "vitest run && vitest run --config vitest.e2e.config.ts"

35 },

36 "keywords": [

37 "conceptcraft",

38 "slides",

39 "presentation",

40 "ai",

41 "cli",

42 "powerpoint",

43 "deck",

44 "generator"

45 ],

46 "author": "ConceptCraft AI",

47 "license": "SEE LICENSE IN LICENSE",

bin/postinstall.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2

3/**

4 * Post-install script

5 * Installs the main skill and recommended external skills

6 */

7

8import { execSync } from "child_process";

9import { fileURLToPath } from "url"

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { createRequire } from 'module'; const require = createRequire(import.meta.url);

3var f={id:"mindframes",name:"mindframes"