registry / @dev-mainsequence/command-center-sdk / 0.5.18
@dev-mainsequence/command-center-sdk@0.5.18
The framework-neutral SDK for building Command Center-compatible resource applications, navigation, layouts, themes, feedback, and embeds.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe automatic postinstall setup of first-party agent skills presents a lifecycle risk, but the inspected behavior is scoped to the consumer repository's managed namespace. Classify as suspicious and warn; the source does not support a block-level attack finding.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm installation runs the package postinstall hook with a consumer project directory available.
Impact
Repository agent behavior may change through newly installed skill instructions; no further attack behavior was established by the inspected source.
Mechanism
The hook copies packaged skills into the repository's .agents/skills/command-center namespace and may sync configured MCP skills.
AI rationale
The automatic postinstall setup of first-party agent skills presents a lifecycle risk, but the inspected behavior is scoped to the consumer repository's managed namespace. Classify as suspicious and warn; the source does not support a block-level attack finding.
Evidence
package.jsoncli/postinstall.mjscli/install-agent-skills.mjs.agents/skills/command-center
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs cli/postinstall.mjs automatically after installation.
- The hook installs packaged skills into the consumer repository's .agents/skills/command-center namespace and can prune entries within that namespace.
- The hook may also sync MCP skills when platform configuration is available; an environment setting can disable that sync.
Evidence against
- The inspected installer targets a repository-local, package-named skill directory; the optional MCP sync is skipped when configuration is unavailable.
- The inspected source does not establish credential theft, arbitrary code execution, or a write outside the managed skill namespace.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./cli/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./cli/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgcli/install-agent-skills.mjsView file
1Install-time code directly mutates a foreign AI-agent control surface:
L388: async function acquireInstallLock(skillsParent) {
L389: await mkdir(skillsParent, { recursive: true });
L390: const lockPath = join(skillsParent, INSTALL_LOCK_FILENAME);
...
L449: resolvedProjectDir,
L450: ".agents",
L451: "skills",
...
L534: const staged = join(stageRoot, ...item.relativePath.split("/"));
L535: await mkdir(dirname(staged), { recursive: true });
L536: await cp(item.source, staged, {
L537: recursive: true,
...
L543:
L544: await mkdir(destinationRoot, { recursive: true });
Write operation from cli/install-agent-skills.mjs:
L388: async function acquireInstallLock(skillsParent) {
L389: await mkdir(skillsParent, { recursive: true });
L390: const lockPath = join(skillsParent, INSTALL_LOCK_FILENAME);
..
Findings
1 Critical3 High4 Medium4 Low
CriticalAi Agent Control Hijackcli/install-agent-skills.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedstyles.css
HighKnown Malware Source Similaritycli/application-sdk-maintenance.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @dev-mainsequence/command-center-sdk@0.5.18.
See all versions of @dev-mainsequence/command-center-sdk for other recorded verdicts.
- Review the evidence and your use of @dev-mainsequence/command-center-sdk@0.5.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.