Loading npm security reports…

@eternalnight/publish-kit@0.5.0: AI-agent control-surface risk | LPM Firewall

registry / @eternalnight/publish-kit / 0.5.0

@eternalnight/publish-kit@0.5.0

superseded by 0.5.1; see https://github.com/EternalNight996/publish-kit/blob/main/CHANGELOG.md

Release playbook for AI agents. npm-installable CLI + DSH plugin + skill bundle. Covers npm, GitHub+Gitee dual remote, DSH marketplace, cargo crates.io, PyPI, PyInstaller exe, Go single-binary, Rust single-binary, Electron/Tauri desktop. Bilingual EN/ZH.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the npm package automatically adds its skill to five user-level AI-agent directories. This changes multiple agent control surfaces without an explicit setup command.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

The package can make its bundled instructions available to several AI-agent hosts across all user projects.

Mechanism

Postinstall symlink creation across global AI-agent skill roots.

Policy narrative

A normal npm install invokes scripts/postinstall.js. The hook creates parent directories and symlinks the package's bundled skill into agent roots for Agents, Claude, Codex, Gemini, and DSH. This is an unconsented, install-time mutation of several independent global agent control surfaces. The hook does not show credential theft or network activity, but the broad automatic propagation itself meets the install-hook abuse boundary.

AI rationale

The package's automatic postinstall writes a bundled capability into several foreign AI-agent skill roots. Its lack of network or credential handling does not remove the concrete broad control-surface mutation.

Evidence

package.jsonscripts/postinstall.js~/.agents/skills/publish-kit~/.claude/skills/publish-kit~/.codex/skills/publish-kit~/.gemini/skills/publish-kit~/.dsh/skills/publish-kit

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

61"scripts": { "postinstall": "node ./scripts/postinstall.js" },

High

Suspicious Lifecycle Evidence

The manifest runs postinstall automatically.

package.jsonView on unpkg · L61

•scripts.postinstall = node ./scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

8L9: const PACKAGE_SKILL_SRC = path.join(__dirname, '..', '.agents', 'skills', 'publish-kit'); L10: const SKILL_NAME = 'publish-kit'; ... L29: const homes = [ L30: path.join(os.homedir(), '.agents', 'skills'), L31: path.join(os.homedir(), '.claude', 'skills'), L32: path.join(os.homedir(), '.codex', 'skills'), L33: path.join(os.homedir(), '.gemini', 'skills'), ... L67: } L68: fs.mkdirSync(dir, { recursive: true }); L69: fs.symlinkSync(PACKAGE_SKILL_SRC, dest, 'junction');

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L8

29const homes = [ path.join(os.homedir(), '.agents', 'skills'), path.join(os.homedir(), '.claude', 'skills'), path.join(os.homedir(), '.codex', 'skills'), path.join(os.homedir(), '.gemini', 'skills'), path.join(os.homedir(), '.dsh', 'skills'), ];

High

Ai Review Evidence

The hook targets five global AI-agent skill roots.

scripts/postinstall.jsView on unpkg · L29

scripts/release-exe.ps1View file

•path = scripts/release-exe.ps1 kind = build_helper sizeBytes = 7265 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/release-exe.ps1View on unpkg

scripts/bootstrap-release.ps1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/bootstrap-release.ps1View on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 41-82json

41 "files": [

42 "README.md",

43 "README.zh.md",

44 "LICENSE",

45 "CHANGELOG.md",

46 "scripts/bootstrap-release.ps1",

47 "scripts/bootstrap-release.sh",

48 "scripts/release-exe.ps1",

49 "scripts/release-exe.sh",

50 ".agents/skills/publish-kit/SKILL.md",

51 ".agents/skills/publish-kit/REFERENCE.md",

52 ".agents/skills/publish-kit/TEMPLATE.md",

53 ".agents/skills/publish-kit/INSTALL.md",

54 ".agents/skills/publish-kit/DSH-DEPLOY.md",

55 ".agents/skills/publish-kit/COMPATIBILITY.md",

56 ".agents/skills/publish-kit/EXAMPLES.md",

57 "assets/readme-banner.svg",

58 "cordis.patch.yml",

59 "scripts/postinstall.js"

60 ],

61 "scripts": {

62 "postinstall": "node ./scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L62

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L62

63 },

High

Suspicious Lifecycle Evidence

The manifest runs postinstall automatically.

package.jsonView on unpkg · L61

64 "engines": {

65 "node": "\u003e=18"

66 },

67 "dsh": {

68 "client": {

69 "platform": "web"

70 },

71 "bundle": {

72 "patch": "./cordis.patch.yml"

73 },

74 "marketplace": {

75 "profiles": [

76 "web"

77 ],

78 "requiresBuildApproval": false,

79 "requiresRestart": true,

80 "manualSteps": false

81 }

82 }

scripts/postinstall.jsView file

Lines 1-49javascript

1#!/usr/bin/env node

2// postinstall.js - Symlink the bundled skill directory into the user's agent skill roots.

3// Runs once when @eternalnight/publish-kit is installed via `npm install` or `dsh plugin add`.

4

5const fs = require('fs');

6const path = require

scripts/release-exe.ps1View file

•path = scripts/release-exe.ps1 kind = build_helper sizeBytes = 7265 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/release-exe.ps1View on unpkg

scripts/bootstrap-release.ps1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/bootstrap-release.ps1View on unpkg