Loading npm security reports…

@dev-mainsequence/command-center-sdk@0.1.10: AI-agent | LPM Firewall

registry / @dev-mainsequence/command-center-sdk / 0.1.10

@dev-mainsequence/command-center-sdk@0.1.10

The unified framework for building Command Center-compatible resource applications, widgets, workspaces, connections, themes, and embeds.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Automatic installation writes package-provided agent skills into the consuming project's AI-agent skill directory. No user command is required.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm runs the package postinstall lifecycle hook during a local dependency installation.

Impact

This mutates a broad AI-agent control surface in the consumer project and can influence agent behavior without the consumer explicitly requesting setup.

Mechanism

The hook uses INIT_CWD as the project directory, then copies packaged skills into .agents/skills/command-center.

Policy narrative

Installing the dependency invokes postinstall. The hook identifies the consuming project and writes packaged skill content under its .agents directory, creating an agent-control artifact automatically. This is an unconsented install-time mutation of a foreign project control surface.

AI rationale

The automatic postinstall hook writes package-controlled agent skills into the consumer project's .agents tree. This meets the install-control-surface blocking policy regardless of the optional MCP path.

Evidence

package.jsoncli/postinstall.mjscli/install-agent-skills.mjs.agents/skills/command-center

Decision evidence

public snapshot

AI identified this as a at 98.0% confidence with false-positive risk.

Source & flagged code

5 flagged

package.jsonView file

Lines 140-180json

140 "./theme/tailwind.css": "./theme/tailwind.css",

141 "./theme/utilities.css": "./theme/utilities.css",

142 "./widget/built-ins.css": "./widget/built-ins.css",

143 "./tailwind.css": "./theme/tailwind.css",

144 "./styles.css": "./styles.css",

145 "./package.json": "./package.json"

146 },

147 "publishConfig": {

148 "access": "public",

149 "registry": "https://registry.npmjs.org/"

150 },

151 "scripts": {

152 "build": "tsc -p tsconfig.json",

153 "size:check": "node ../scripts/check-package-size.mjs dist/index.js 10000 && node ../scripts/check-package-size.mjs dist/views/ResourceListPage.js 50000 && node ../scripts/check-package-size.mjs dist/views/ResourceSearch.js 25000 && node ../scripts/check-package-size.mjs dist/views/ResourcePagination.js 25000",

154 "check": "npm run theme:audit && tsc -p tsconfig.json --noEmit",

155 "theme:audit": "node cli/command-center-sdk.mjs theme audit --path styles.css",

156 "test": "vitest run && node --test tests/cli/*.node.mjs",

157 "test:browser": "npm run build && playwright test --config playwright.config.ts",

158 "test:package-smoke": "node tests/cli/packed-consumer-smoke.mjs",

159 "prepack": "npm run build",

160 "postinstall": "node ./cli/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L160

High

Suspicious Lifecycle Evidence

The package runs cli/postinstall.mjs automatically after installation.

package.jsonView on unpkg · L160

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L160

161 },

162 "peerDependencies": {

163 "react": ">=18 <20",

164 "react-dom": ">=18 <20"

165 },

166 "dependencies": {

167 "lucide-react": "^0.500.0",

168 "react-markdown": "^10.1.0",

169 "rehype-raw": "^7.0.0",

170 "rehype-sanitize": "^6.0.0",

171 "remark-gfm": "^4.0.1"

172 },

173 "devDependencies": {

174 "@playwright/test": "^1.62.1",

175 "@types/react": "^19.0.0",

176 "@types/react-dom": "^19.0.0",

177 "ajv": "^8.20.0",

178 "react": "^19.0.0",

179 "react-dom": "^19.0.0",

180 "typescript": "^5.8.0",

cli/install-agent-skills.mjsView file

Lines 1-21javascript

1import { cp, lstat, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";

2import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

3import { fileURLToPath } from

theme/ag-grid.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

theme/ag-grid.cssView on unpkg