registry / @ensi-platform/admin-ui / 0.8.5
@ensi-platform/admin-ui@0.8.5
Admin UI for Ensi admin panel
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe automatic postinstall mutation of consumer agent configuration leaves a concrete lifecycle risk, so this warrants a warning. The behavior installs this package's own relevant skill and uses a marked AGENTS.md block; inspected source does not establish a malicious payload or exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package runs its postinstall hook.
Impact
Consumer agent configuration is changed automatically. The inspected skill provides package-related UI guidance; no malicious payload or data transfer was identified.
Mechanism
The bundled exporter defaults to all three supported agent targets, copies the package skill, and adds or updates a marked AGENTS.md section.
AI rationale
The automatic postinstall mutation of consumer agent configuration leaves a concrete lifecycle risk, so this warrants a warning. The behavior installs this package's own relevant skill and uses a marked AGENTS.md block; inspected source does not establish a malicious payload or exfiltration.
Evidence
package.jsonbin/ai.jsai/skills/admin-ui/SKILL.md.cursor/skills.claude/skills.agents/skillsAGENTS.md
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package postinstall runs bin/ai.js automatically during installation.
- With no target flags, the exporter selects Cursor, Claude, and Codex project skill directories.
- The exporter copies its skill into consumer repositories and adds a package-marked block to AGENTS.md.
- The installed skill contains guidance for using this package's admin UI components.
Evidence against
- The AGENTS.md update is limited to a package-marked block, and the skill content is relevant to this UI package.
Behavioral surface
EnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/ai.js || exit 0
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./bin/ai.js || exit 0
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/ai.jsView file
8import { join, sep, resolve, dirname } from 'path';
L9: import { existsSync, readFileSync, readdirSync, rmSync, mkdirSync, cpSync, writeFileSync } from 'fs';
L10:
...
L8525: cursor: join(".cursor", "skills"),
L8526: claude: join(".claude", "skills"),
L8527: codex: join(".agents", "skills")
L8528: };
...
L8531: var resolveTargets = (flags) => {
L8532: const selected = [flags.cursor ? "cursor" : "", flags.claude ? "claude" : "", flags.codex ? "codex" : ""].filter(
L8533: (target) => isExportTarget(target)
...
L8606: }
L8607: writeFileSync(targetPath, content);
Findings
1 Critical3 High3 Medium5 Low
CriticalAi Agent Control Hijackbin/ai.js
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/ai.js
HighSemantic Analysis Limiteddist/assets/Component.css
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @ensi-platform/admin-ui@0.8.5.
See all versions of @ensi-platform/admin-ui for other recorded verdicts.
- Review the evidence and your use of @ensi-platform/admin-ui@0.8.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.