Loading npm security reports…

@deppon/pm-toolkit@2.5.53: AI-agent policy block | LPM Firewall

registry / @deppon/pm-toolkit / 2.5.53

@deppon/pm-toolkit@2.5.53

德邦 PRD 产品经理工具包脚手架：create 开箱工作台；init/update 同步工具

AI Security Review

scanned 15h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Installing the dependency silently mutates project-local JoyCode and Cursor AI-agent configuration. It registers an active JoyCode agent and MCP servers, and overwrites configured skills/rules.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall when installed as a project dependency

Impact

Unconsented activation of package-supplied agent instructions and tools in the consumer project.

Mechanism

automatic cross-platform AI-agent configuration and MCP registration

Policy narrative

On dependency installation, postinstall calls update with both AI platforms and agent setup enabled. The installer replaces project .joycode/.cursor skill and rule directories, registers an active JoyCode agent, and inserts MCP commands into both platforms' configuration without an explicit setup command. It also may query npm and execute npm i in the consumer project.

Rationale

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, not merely an explicit scaffold command. No separate credential theft or external data-exfiltration path was found.

Evidence

package.jsonbin/postinstall.jslib/install.jsassets/joycode/agents/德邦PRD产品经理.mdassets/mcp/proto-version-server.jsassets/mcp/line-repos-server.js.joycode/skills.joycode/rules.joycode/agents/德邦PRD产品经理.md.joycode/agent.json

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

lib/install.jsView file

11const https = require('https') L12: const { execSync, spawnSync } = require('child_process') L13:

High

Child Process

Package source references child process execution.

lib/install.jsView on unpkg · L11

728try { L729: execSync(`npm i -D ${TOOLKIT_PKG_NAME}@${latest}`, { L730: cwd: targetRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/install.jsView on unpkg · L728

assets/scripts/proto-version.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @deppon/pm-toolkit@2.5.46 matchedIdentity = npm:QGRlcHBvbi9wbS10b29sa2l0:2.5.46 similarity = 0.688 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

assets/scripts/proto-version.jsView on unpkg

17L18: const http = require('http'); L19: const fs = require('fs'); ... L21: const { URL } = require('url'); L22: const { exec } = require('child_process'); L23: const webImport = require('./web-import'); ... L29: const CURRENT_FILE = path.join(VERSIONS, 'CURRENT.json'); L30: const DEFAULT_PORT = Number(process.env.PROTO_VERSION_PORT || 5502); L31: const WORKBENCH_PATH = '/prototype.html';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

assets/scripts/proto-version.jsView on unpkg · L17

assets/scripts/更新PM工具包.batView file

•path = assets/scripts/更新PM工具包.bat kind = build_helper sizeBytes = 4594 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

assets/scripts/更新PM工具包.batView on unpkg

assets/skills/ui-ux-pro-max/scripts/tests/test_core.pyView file

•path = assets/skills/ui-ux-pro-max/scripts/tests/test_core.py kind = payload_in_excluded_dir sizeBytes = 5901 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

assets/skills/ui-ux-pro-max/scripts/tests/test_core.pyView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 7-44json

7 "deppon",

8 "prd",

9 "pm",

10 "scaffold",

11 "joycode",

12 "cursor",

13 "skills"

14 ],

15 "bin": {

16 "deppon-pm": "bin/deppon-pm.js"

17 },

18 "main": "lib/install.js",

19 "files": [

20 "bin",

21 "lib",

22 "assets",

23 "LICENSE",

24 "README.md"

25 ],

26 "scripts": {

27 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "sync:assets": "node scripts/sync-from-cmc-crm-prd.cjs",

29 "publish:auto": "npm publish"

30 },

31 "engines": {

32 "node": ">=18"

33 },

34 "publishConfig": {

35 "registry": "https://registry.npmjs.org/",

36 "access": "public"

37 },

38 "repository": {

39 "type": "git",

40 "url": "",

41 "directory": "packages/deppon-pm-toolkit"

42 }

43}

44

lib/install.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * @deppon/pm-toolkit · 安装核心

4 * 从本包 assets/ 同步到目标项目（幂等、非破坏）。

5 */

6'use strict'

7

8const fs = require('fs')

9const

assets/scripts/proto-version.jsView file

Lines 1-37javascript

1#!/usr/bin/env node

2/**

3 * 原型版本快照（给产品经理用，不必会 git）

4 *

5 * npm run version:serve # 静态工作台 + 版本 API（默认 http://127.0.0.1:5502）

6 * npm run version:create -- --version=v20260718-am --pages=<lineId>/<主题>,…

7 * npm run version:list

8 *

9 * 快照目录：src/prototypes/versions/<version>/

10 * 当前基线：src/prototypes/versions/CURRENT.json

11

assets/scripts/更新PM工具包.batView file

•path = assets/scripts/更新PM工具包.bat kind = build_helper sizeBytes = 4594 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

assets/scripts/更新PM工具包.batView on unpkg

assets/skills/ui-ux-pro-max/scripts/tests/test_core.pyView file

•path = assets/skills/ui-ux-pro-max/scripts/tests/test_core.py kind = payload_in_excluded_dir sizeBytes = 5901 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

assets/skills/ui-ux-pro-max/scripts/tests/test_core.pyView on unpkg