registry / @dev-mainsequence/command-center-sdk / 0.5.12

@dev-mainsequence/command-center-sdk@0.5.12

The framework-neutral SDK for building Command Center-compatible resource applications, navigation, layouts, themes, feedback, and embeds.

AI Security Review

scanned 21d ago · by lpm-firewall-ai

Source inspection establishes automatic first-party agent extension setup, which the policy classifies as warning-only. Scanner labels do not establish malicious intent or override the inspected namespace and configuration guards.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

A local npm installation runs postinstall; configured platform access additionally enables remote skill synchronization.

Impact

Installed skills can influence subsequent agent behavior; no confirmed broad control hijack was established.

Mechanism

The installers stage and replace skills within dedicated namespaces, using path checks and ownership sentinels.

AI rationale

Evidence

package.jsoncli/postinstall.mjscli/install-agent-skills.mjscli/install-mcp-skills.mjscli/mcp-platform-skills.mjs.agents/skills/command-center.agents/skills/ms-command-center

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json automatically runs cli/postinstall.mjs, which invokes agent skill installation.
The installer copies and replaces skills under .agents/skills/command-center in the consumer project.
Remote platform skills use the separate ms-command-center namespace with destination safety checks.
Remote synchronization requires configured endpoint and authentication; an environment switch disables it.

Evidence against

Inspected installers restrict writes to SDK-specific namespaces and validate paths, symlinks, and ownership records.
Flagged maintenance and repository operations are exposed through explicit CLI commands; the manifest has no runtime self-dependency.
No concrete covert exfiltration or broad foreign agent-control mutation was established.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

6 flagged

package.jsonView file

Lines 111-151json

111 "./theme/styles.css": "./theme/styles.css",

112 "./theme/tailwind.css": "./theme/tailwind.css",

113 "./theme/utilities.css": "./theme/utilities.css",

114 "./tailwind.css": "./theme/tailwind.css",

115 "./styles.css": "./styles.css",

116 "./package.json": "./package.json"

117 },

118 "publishConfig": {

119 "access": "public",

120 "registry": "https://registry.npmjs.org/"

121 },

122 "scripts": {

123 "build": "node ../scripts/clean-sdk-dist.mjs && tsc -p tsconfig.json",

124 "size:check": "node ../scripts/check-package-size.mjs dist/index.js 10000 && node ../scripts/check-package-size.mjs dist/feedback/components.js 25000 && node ../scripts/check-package-size.mjs dist/controls/components.js 20000 && node ../scripts/check-package-size.mjs dist/layout/components.js 20000 && node ../scripts/check-package-size.mjs dist/layout/testing/index.js 30000 && node ../scripts/check-package-size.mjs dist/navigation/testing/index.js 12000 && node ../scripts/check-package-size.mjs dist/views/ResourceListPage.js 50000 && node ../scripts/check-package-size.mjs dist/views/Resour ...

125 "check": "npm run theme:audit && tsc -p tsconfig.json --noEmit && tsc -p tests/types/tsconfig.json",

126 "theme:audit": "node cli/command-center-sdk.mjs theme audit --path styles.css",

127 "test": "vitest run && node --test tests/cli/*.node.mjs",

128 "test:browser": "npm run build && playwright test --config playwright.config.ts",

129 "test:package-smoke": "node tests/cli/packed-consumer-smoke.mjs",

130 "prepack": "npm run build",

131 "postinstall": "node ./cli/postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L131

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L131

132 },

133 "peerDependencies": {

134 "react": ">=18 <20",

135 "react-dom": ">=18 <20"

136 },

137 "dependencies": {

138 "lucide-react": "^0.500.0"

139 },

140 "devDependencies": {

141 "@playwright/test": "^1.62.1",

142 "@types/react": "^19.0.0",

143 "@types/react-dom": "^19.0.0",

144 "ajv": "^8.20.0",

145 "jsdom": "^29.1.0",

146 "react": "^19.0.0",

147 "react-dom": "^19.0.0",

148 "typescript": "^5.8.0",

149 "vitest": "^4.1.5"

150 }

151}

Long lines were clipped for display.

cli/install-agent-skills.mjsView file

Lines 1-21javascript

1import { cp, lstat, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";

2import { hostname } from "node:os";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

cli/install-agent-skills.mjsView on unpkg · L1

3import { basename, dirname, isAbsolute, join, relative, resolve, sep } from

styles.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

styles.cssView on unpkg

cli/application-sdk-maintenance.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.1 matchedPath = cli/application-sdk-maintenance.mjs matchedIdentity = npm:[redacted]:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/application-sdk-maintenance.mjsView on unpkg

cli/code-repository-sync-local-ops.mjsView file

•matchType = normalized_sha256 matchedPackage = @dev-mainsequence/command-center-sdk@0.4.1 matchedPath = cli/code-repository-sync-local-ops.mjs matchedIdentity = npm:[redacted]:0.4.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

cli/code-repository-sync-local-ops.mjsView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./cli/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./cli/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

cli/install-agent-skills.mjsView file

1Install-time code directly mutates a foreign AI-agent control surface: L388: async function acquireInstallLock(skillsParent) { L389: await mkdir(skillsParent, { recursive: true }); L390: const lockPath = join(skillsParent, INSTALL_LOCK_FILENAME); ... L449: resolvedProjectDir, L450: ".agents", L451: "skills", ... L534: const staged = join(stageRoot, ...item.relativePath.split("/")); L535: await mkdir(dirname(staged), { recursive: true }); L536: await cp(item.source, staged, { L537: recursive: true, ... L543: L544: await mkdir(destinationRoot, { recursive: true }); Write operation from cli/install-agent-skills.mjs: L388: async function acquireInstallLock(skillsParent) { L389: await mkdir(skillsParent, { recursive: true }); L390: const lockPath = join(skillsParent, INSTALL_LOCK_FILENAME); ..

Findings

1 Critical4 High4 Medium4 Low

CriticalAi Agent Control Hijackcli/install-agent-skills.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedstyles.css

HighKnown Malware Source Similaritycli/application-sdk-maintenance.mjs

HighKnown Malware Source Similaritycli/code-repository-sync-local-ops.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @dev-mainsequence/command-center-sdk@0.5.12.

See all versions of @dev-mainsequence/command-center-sdk for other recorded verdicts.

Review the evidence and your use of @dev-mainsequence/command-center-sdk@0.5.12 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-02 11:23:16.287Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.