Loading npm security reports…

@dev-mainsequence/command-center-sdk@0.1.20: AI-agent | LPM Firewall

registry / @dev-mainsequence/command-center-sdk / 0.1.20

@dev-mainsequence/command-center-sdk@0.1.20

The unified framework for building Command Center-compatible resource applications, widgets, workspaces, connections, themes, and embeds.

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically modifies the consumer repository's AI-agent skills directory. With MCP credentials configured, it also retrieves and installs remote skill content there.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall during package installation

Impact

Unconsented modification of a broad AI-agent control surface can alter agent behavior in the consuming repository.

Mechanism

automatic agent-skill installation and conditional remote MCP skill synchronization

Policy narrative

The package declares postinstall, which invokes an installer targeting the consumer project's .agents/skills/command-center directory without an explicit user command. If MCP configuration is present, the same lifecycle hook fetches a catalog and installs additional skill content. This creates an unconsented AI-agent control-surface mutation during dependency installation.

AI rationale

Automatic postinstall writes agent skills into the consuming project and can add remotely fetched skills. That is concrete unconsented mutation of a broad AI-agent control surface.

Evidence

package.jsoncli/postinstall.mjscli/install-agent-skills.mjs.agents/skills/command-center.agents/skills/mainsequence

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./cli/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./cli/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cli/install-agent-skills.mjsView file

1Install-time code directly mutates a foreign AI-agent control surface: L338: resolvedProjectDir, L339: ".agents", L340: "skills", ... L391: const skillsParent = dirname(destinationRoot); L392: await mkdir(skillsParent, { recursive: true }); L393: const stageRoot = await mkdtemp(join(skillsParent, ".command-center-stage-")); ... L402: const staged = join(stageRoot, ...item.relativePath.split("/")); L403: await mkdir(dirname(staged), { recursive: true }); L404: await cp(item.source, staged, { L405: recursive: true, ... L411: L412: await mkdir(destinationRoot, { recursive: true }); Write operation from cli/install-agent-skills.mjs: L338: resolvedProjectDir, L339: ".agents", L340: "skills", ... L391: const skillsParent = dirname(destinationRoot); L392: await mkdir(skillsParent, { recursive: t

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

contracts/manifest.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

contracts/manifest.jsonView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.1.18 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.1.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @dev-mainsequence/command-center-sdk@0.1.21 matchedIdentity = npm:[redacted]:0.1.21 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 152-192json

152 "./theme/tailwind.css": "./theme/tailwind.css",

153 "./theme/utilities.css": "./theme/utilities.css",

154 "./widget/built-ins.css": "./widget/built-ins.css",

155 "./tailwind.css": "./theme/tailwind.css",

156 "./styles.css": "./styles.css",

157 "./package.json": "./package.json"

158 },

159 "publishConfig": {

160 "access": "public",

161 "registry": "https://registry.npmjs.org/"

162 },

163 "scripts": {

164 "build": "node ../scripts/clean-sdk-dist.mjs && tsc -p tsconfig.json",

165 "size:check": "node ../scripts/check-package-size.mjs dist/index.js 10000 && node ../scripts/check-package-size.mjs dist/feedback/components.js 25000 && node ../scripts/check-package-size.mjs dist/layout/components.js 20000 && node ../scripts/check-package-size.mjs dist/layout/testing/index.js 30000 && node ../scripts/check-package-size.mjs dist/views/ResourceListPage.js 50000 && node ../scripts/check-package-size.mjs dist/views/ResourceSearch.js 25000 && node ../scripts/check-package-size.mjs dist/views/ResourcePagination.js 25000",

166 "check": "npm run theme:audit && tsc -p tsconfig.json --noEmit && tsc -p tests/types/tsconfig.json",

167 "theme:audit": "node cli/command-center-sdk.mjs theme audit --path styles.css",

168 "test": "vitest run && node --test tests/cli/*.node.mjs",

169 "test:browser": "npm run build && playwright test --config playwright.config.ts",

170 "test:package-smoke": "node tests/cli/packed-consumer-smoke.mjs",

171 "prepack": "npm run build",

172 "postinstall": "node ./cli/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L172

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L172

173 },

174 "peerDependencies": {

175 "react": ">=18 <20",

176 "react-dom": ">=18 <20"

177 },

178 "dependencies": {

179 "lucide-react": "^0.500.0",

180 "react-markdown": "^10.1.0",

181 "rehype-raw": "^7.0.0",

182 "rehype-sanitize": "^6.0.0",

183 "remark-gfm": "^4.0.1"

184 },

185 "devDependencies": {

186 "@playwright/test": "^1.62.1",

187 "@types/react": "^19.0.0",

188 "@types/react-dom": "^19.0.0",

189 "ajv": "^8.20.0",

190 "jsdom": "^29.1.0",

191 "react": "^19.0.0",

192 "react-dom": "^19.0.0",

cli/install-agent-skills.mjsView file

Lines 1-21javascript

1import { cp, lstat, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";

2import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

3import { fileURLToPath } from

contracts/manifest.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

contracts/manifest.jsonView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.1.18 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.1.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @dev-mainsequence/command-center-sdk@0.1.21 matchedIdentity = npm:[redacted]:0.1.21 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg