Loading npm security reports…

@dev-mainsequence/command-center-sdk@0.4.0: AI-agent | LPM Firewall

registry / @dev-mainsequence/command-center-sdk / 0.4.0

@dev-mainsequence/command-center-sdk@0.4.0

The framework-neutral SDK for building Command Center-compatible resource applications, navigation, layouts, themes, feedback, and embeds.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically alters the consumer project's generic agent-skill directories. With configured credentials, it also downloads MCP-provided skill content and installs it there.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

A dependency installation can change an AI agent's available instructions and capabilities in the consumer project.

Mechanism

Automatic local and authenticated remote agent-skill installation.

Policy narrative

The npm postinstall hook resolves the consumer repository and installs packaged skills under .agents/skills/command-center without a user command. If endpoint and token environment variables exist, the same hook retrieves an authenticated MCP catalog and installs its content under .agents/skills/mainsequence. This is an unconsented install-time mutation of a broad AI-agent control surface.

AI rationale

The package automatically changes generic consumer AI-agent skill directories during npm installation and can populate them with remotely supplied content. Its safeguards do not establish user consent for this lifecycle behavior.

Evidence

package.jsoncli/postinstall.mjscli/install-agent-skills.mjs.agents/skills/command-center/.agents/skills/mainsequence/agent_scaffold/skills

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./cli/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./cli/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cli/install-agent-skills.mjsView file

1Install-time code directly mutates a foreign AI-agent control surface: L377: resolvedProjectDir, L378: ".agents", L379: "skills", ... L428: const skillsParent = dirname(destinationRoot); L429: await mkdir(skillsParent, { recursive: true }); L430: const stageRoot = await mkdtemp(join(skillsParent, ".command-center-stage-")); ... L439: const staged = join(stageRoot, ...item.relativePath.split("/")); L440: await mkdir(dirname(staged), { recursive: true }); L441: await cp(item.source, staged, { L442: recursive: true, ... L448: L449: await mkdir(destinationRoot, { recursive: true }); Write operation from cli/install-agent-skills.mjs: L377: resolvedProjectDir, L378: ".agents", L379: "skills", ... L428: const skillsParent = dirname(destinationRoot); L429: await mkdir(skillsParent, { recursive: t

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

contracts/manifest.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

contracts/manifest.jsonView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.1.20 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.1.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.1.20 matchedPath = cli/code-repository-sync-local-ops.mjs matchedIdentity = npm:[redacted]:0.1.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 103-143json

103 "./theme/styles.css": "./theme/styles.css",

104 "./theme/tailwind.css": "./theme/tailwind.css",

105 "./theme/utilities.css": "./theme/utilities.css",

106 "./tailwind.css": "./theme/tailwind.css",

107 "./styles.css": "./styles.css",

108 "./package.json": "./package.json"

109 },

110 "publishConfig": {

111 "access": "public",

112 "registry": "https://registry.npmjs.org/"

113 },

114 "scripts": {

115 "build": "node ../scripts/clean-sdk-dist.mjs && tsc -p tsconfig.json",

116 "size:check": "node ../scripts/check-package-size.mjs dist/index.js 10000 && node ../scripts/check-package-size.mjs dist/feedback/components.js 25000 && node ../scripts/check-package-size.mjs dist/layout/components.js 20000 && node ../scripts/check-package-size.mjs dist/layout/testing/index.js 30000 && node ../scripts/check-package-size.mjs dist/navigation/testing/index.js 12000 && node ../scripts/check-package-size.mjs dist/views/ResourceListPage.js 50000 && node ../scripts/check-package-size.mjs dist/views/ResourceSearch.js 25000 && node ../scripts/check-package-size.mjs dist/views/Resou ...

117 "check": "npm run theme:audit && tsc -p tsconfig.json --noEmit && tsc -p tests/types/tsconfig.json",

118 "theme:audit": "node cli/command-center-sdk.mjs theme audit --path styles.css",

119 "test": "vitest run && node --test tests/cli/*.node.mjs",

120 "test:browser": "npm run build && playwright test --config playwright.config.ts",

121 "test:package-smoke": "node tests/cli/packed-consumer-smoke.mjs",

122 "prepack": "npm run build",

123 "postinstall": "node ./cli/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L123

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L123

124 },

125 "peerDependencies": {

126 "react": ">=18 <20",

127 "react-dom": ">=18 <20"

128 },

129 "dependencies": {

130 "lucide-react": "^0.500.0"

131 },

132 "devDependencies": {

133 "@playwright/test": "^1.62.1",

134 "@types/react": "^19.0.0",

135 "@types/react-dom": "^19.0.0",

136 "ajv": "^8.20.0",

137 "jsdom": "^29.1.0",

138 "react": "^19.0.0",

139 "react-dom": "^19.0.0",

140 "typescript": "^5.8.0",

141 "vitest": "^4.1.5"

142 }

143}

Long lines were clipped for display.

cli/install-agent-skills.mjsView file

Lines 1-21javascript

1import { cp, lstat, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";

2import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

3import { fileURLToPath } from

contracts/manifest.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

contracts/manifest.jsonView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.1.20 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.1.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.1.20 matchedPath = cli/code-repository-sync-local-ops.mjs matchedIdentity = npm:[redacted]:0.1.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg