Loading npm security reports…

@dev-mainsequence/command-center-sdk@0.4.1: AI-agent | LPM Firewall

registry / @dev-mainsequence/command-center-sdk / 0.4.1

@dev-mainsequence/command-center-sdk@0.4.1

The framework-neutral SDK for building Command Center-compatible resource applications, navigation, layouts, themes, feedback, and embeds.

AI Security Review

scanned 17d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies the consumer repository's AI-agent skill directory. With configured MCP credentials, it also retrieves and installs remotely supplied skills.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm postinstall during package installation.

Impact

A dependency installation can alter an AI-agent control surface and introduce remotely sourced agent instructions without an explicit setup command.

Mechanism

The lifecycle script copies packaged skills into .agents/skills/command-center and conditionally obtains an MCP catalog using environment-provided endpoint and token values.

Policy narrative

The postinstall hook automatically writes agent skills into the consuming project's .agents control surface. It additionally activates a remote MCP skill synchronization path when endpoint and token environment variables are present, installing returned skills as part of dependency installation. This is unconsented lifecycle mutation of a broad AI-agent control surface.

AI rationale

The package performs automatic postinstall AI-agent configuration rather than requiring an explicit user command. This meets the install-control-surface blocking policy.

Evidence

package.jsoncli/postinstall.mjscli/install-agent-skills.mjs.agents/skills/command-center

Decision evidence

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./cli/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./cli/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cli/install-agent-skills.mjsView file

1Install-time code directly mutates a foreign AI-agent control surface: L377: resolvedProjectDir, L378: ".agents", L379: "skills", ... L428: const skillsParent = dirname(destinationRoot); L429: await mkdir(skillsParent, { recursive: true }); L430: const stageRoot = await mkdtemp(join(skillsParent, ".command-center-stage-")); ... L439: const staged = join(stageRoot, ...item.relativePath.split("/")); L440: await mkdir(dirname(staged), { recursive: true }); L441: await cp(item.source, staged, { L442: recursive: true, ... L448: L449: await mkdir(destinationRoot, { recursive: true }); Write operation from cli/install-agent-skills.mjs: L377: resolvedProjectDir, L378: ".agents", L379: "skills", ... L428: const skillsParent = dirname(destinationRoot); L429: await mkdir(skillsParent, { recursive: t

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

styles.cssView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 1bebc3709a29b1cb signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 shingleOverlap = 23 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = cli/code-repository-sync-local-ops.mjs matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg

dist/embed/static-site.jsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = dist/embed/static-site.js matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/embed/static-site.jsView on unpkg

Source & flagged code

8 flagged

package.jsonView file

Lines 103-143json

103 "./theme/styles.css": "./theme/styles.css",

104 "./theme/tailwind.css": "./theme/tailwind.css",

105 "./theme/utilities.css": "./theme/utilities.css",

106 "./tailwind.css": "./theme/tailwind.css",

107 "./styles.css": "./styles.css",

108 "./package.json": "./package.json"

109 },

110 "publishConfig": {

111 "access": "public",

112 "registry": "https://registry.npmjs.org/"

113 },

114 "scripts": {

115 "build": "node ../scripts/clean-sdk-dist.mjs && tsc -p tsconfig.json",

116 "size:check": "node ../scripts/check-package-size.mjs dist/index.js 10000 && node ../scripts/check-package-size.mjs dist/feedback/components.js 25000 && node ../scripts/check-package-size.mjs dist/layout/components.js 20000 && node ../scripts/check-package-size.mjs dist/layout/testing/index.js 30000 && node ../scripts/check-package-size.mjs dist/navigation/testing/index.js 12000 && node ../scripts/check-package-size.mjs dist/views/ResourceListPage.js 50000 && node ../scripts/check-package-size.mjs dist/views/ResourceSearch.js 25000 && node ../scripts/check-package-size.mjs dist/views/Resou ...

117 "check": "npm run theme:audit && tsc -p tsconfig.json --noEmit && tsc -p tests/types/tsconfig.json",

118 "theme:audit": "node cli/command-center-sdk.mjs theme audit --path styles.css",

119 "test": "vitest run && node --test tests/cli/*.node.mjs",

120 "test:browser": "npm run build && playwright test --config playwright.config.ts",

121 "test:package-smoke": "node tests/cli/packed-consumer-smoke.mjs",

122 "prepack": "npm run build",

123 "postinstall": "node ./cli/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L123

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L123

124 },

125 "peerDependencies": {

126 "react": ">=18 <20",

127 "react-dom": ">=18 <20"

128 },

129 "dependencies": {

130 "lucide-react": "^0.500.0"

131 },

132 "devDependencies": {

133 "@playwright/test": "^1.62.1",

134 "@types/react": "^19.0.0",

135 "@types/react-dom": "^19.0.0",

136 "ajv": "^8.20.0",

137 "jsdom": "^29.1.0",

138 "react": "^19.0.0",

139 "react-dom": "^19.0.0",

140 "typescript": "^5.8.0",

141 "vitest": "^4.1.5"

142 }

143}

Long lines were clipped for display.

cli/install-agent-skills.mjsView file

Lines 1-21javascript

1import { cp, lstat, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";

2import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

3import { fileURLToPath } from

styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

styles.cssView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = 1bebc3709a29b1cb signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 shingleOverlap = 23 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = cli/code-repository-sync-local-ops.mjs matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg

dist/embed/static-site.jsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.0 matchedPath = dist/embed/static-site.js matchedIdentity = npm:[redacted]:0.4.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/embed/static-site.jsView on unpkg