registry / @explorer02/cfm-survey-sdk / 0.8.6

@explorer02/cfm-survey-sdk@0.8.6

A headless React SDK for building survey experiences. Give it a survey instance and it handles fetching, page navigation, answer state, validation, progress, and submission — you keep full control over the markup and styling.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Installation mutates the consuming project's AI-agent instruction/control files without an explicit setup command. When no agent is detected, it writes stubs for all supported agent surfaces.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall during dependency installation

Impact

Influences Codex, Claude, Cursor, and related coding-agent behavior in the consumer repository.

Mechanism

environment-detected project-root AI-agent stub injection

Policy narrative

On dependency installation, `postinstall.js` resolves the consumer project root and detects AI-agent environment signals. It then creates or merges package-controlled instructions into `AGENTS.md`, `CLAUDE.md`, and/or `.cursorrules`; with no detection it writes all three. These files direct agents to read the package's operating contract, creating an unconsented, broad AI-agent control-surface mutation.

Rationale

The lifecycle hook makes persistent changes to foreign project AI-agent instruction files by default. Although the payload is visible and package-aligned, the unconsented postinstall control-surface mutation meets the blocking policy.

Evidence

package.jsonpostinstall.jspostinstall/detect-agent.jspostinstall/agent-stubs.jstemplates/AGENT.mdAGENTS.mdCLAUDE.md.cursorrules

Decision evidence

public snapshot

AI called this Malicious at 96.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for policy block

`package.json` invokes `node postinstall.js` on install.
`postinstall.js` targets `INIT_CWD` or the consuming project root.
It writes/merges project-root `AGENTS.md` and `.cursorrules`; default detection writes all stubs.
It writes `CLAUDE.md` when absent or containing `@AGENTS.md`.
`postinstall/detect-agent.js` fingerprints Codex, Claude, Cursor, and Antigravity environment signals.

Evidence against

Postinstall performs no network request, shell execution, or credential harvesting.
Written stubs point to the installed package's survey-agent documentation and use explicit markers.
CLI network, deployment, and shell actions require explicit `cfm-sdk` commands.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 7 file(s), 381 KB of source, external domains: custom-p0.feedbook.me, distribution-dashboard-three.vercel.app, nodejs.org, raw.githubusercontent.com

Source & flagged code

8 flagged

package.jsonView file

Lines 1-41json

2 "name": "@explorer02/cfm-survey-sdk",

3 "version": "0.8.6",

4 "main": "dist/index.js",

5 "module": "dist/index.mjs",

6 "types": "dist/index.d.ts",

7 "bin": {

8 "cfm-sdk": "./dist/cli/index.js"

9 },

10 "files": [

11 "dist",

12 "templates",

13 "postinstall.js",

14 "postinstall"

15 ],

16 "scripts": {

17 "build": "tsup",

18 "build:all": "npm run build",

19 "prepare": "npm run build",

20 "lint": "tsc --noEmit",

21 "postinstall": "node postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L21

22 "test": "vitest run",

23 "test:watch": "vitest",

24 "test:coverage": "vitest run --coverage",

25 "docs:sync-manifest": "npx tsx scripts/generate-doc-manifest.ts",

26 "split-survey-ui-config": "npx tsx scripts/split-survey-ui-config.ts",

27 "merge-survey-ui-config": "npx tsx scripts/merge-survey-ui-config.ts",

28 "lint:agent-docs": "bash scripts/lint-agent-docs.sh",

29 "sync-agent-stubs": "node scripts/sync-monorepo-agent-stubs.js"

30 },

31 "peerDependencies": {

32 "react": ">=17.0.0",

33 "@tanstack/react-query": "^5.0.0"

34 },

35 "devDependencies": {

36 "@testing-library/jest-dom": "^6.4.2",

37 "@testing-library/react": "^14.2.1",

38 "@testing-library/user-event": "^14.5.2",

39 "@vitest/coverage-v8": "^1.3.1",

40 "@types/react": "^17.0.0",

41 "@tanstack/react-query": "^5.0.0",

dist/cli/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2"use strict";var Pi=Object.create;var It=Object.defineProperty;var $i=Object.getOwnPropertyDescriptor;var Di=Object.getOwnPropertyNames;var _i=Object.getPrototypeOf,Oi=Object.prototype.hasOwnProperty;var f=(e,t)=>

postinstall.jsView file

Lines 4-44javascript

4const {

5 NPM_AGENT_PATH,

6 getAgentsMdStub,

7 getCursorRulesStub,

8 getClaudeMdStub,

9 mergeMarkedBlock,

10 canUpdateClaudeMd,

11} = require('./postinstall/agent-stubs'

templates/docs/survey-ui/verify-agent-build.shView file

•path = templates/docs/survey-ui/verify-agent-build.sh kind = build_helper sizeBytes = 10511 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/docs/survey-ui/verify-agent-build.shView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli/index.jsView file

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli/index.jsView on unpkg · L1

1#!/usr/bin/env node L2: "use strict";var Pi=Object.create;var It=Object.defineProperty;var $i=Object.getOwnPropertyDescriptor;var Di=Object.getOwnPropertyNames;var _i=Object.getPrototypeOf,Oi=Object.proto... L3: `).length}function wt(e,t,n){let o=new Set;if(t==="fastPath"){let i=e.fastPath;for(let r of i?.read??[])o.add(r)}else if(t==="phase"&&n!==void 0){let r=e.phases?.find(s=>String(s.i... L4: ${R.bold}Doc read budget audit (${s.profile})${R.reset}`),console.log("\u2500".repeat(40));for(let a of s.entries){let l=a.tier==="ok"?`${R.green}OK ${R.reset}`:a.tier==="warn"?`$... ... L7: `,"utf8"),console.log(` L8: ${R.green}OK:${R.reset} Wrote docInventory to MANIFEST.json`)}return s.ok||e.warnOnly?0:e.ci||s.slow.length>0?1:0}function Lt(e){let t=e??kt(),n=Rt(t),o=wt(n,"fastPath"),i=Et(t,o,"... L9: ... L74: Source: ${e.source}`),console.log(n),console.log(""),!1}function at(e,t,n=!1){let o=$r(t,n);return o.length?Or({title:"INSTALL SURVEY-TYPE DEPS (run once before Phase 6)",packages:... L75: `)){let o=n.trim();if(!o||o.startsWith("#"))continue;let i=o.indexOf("=");if(i<=0)continue;let r=o.slice(0,i).trim(),s=o.slice(i+1).trim();(s.startsWith('"')&&s.endsWith('"')||s.st... L76:

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli/index.jsView on unpkg · L1

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/index.jsView on unpkg · L1

postinstall.jsView file

24Install-time AI-agent control hijack evidence: L34: L35: fs.writeFileSync(filePath, newContent, 'utf8'); L36: } ... L41: function writeClaudeMd(targetDir) { L42: const filePath = path.join(targetDir, 'CLAUDE.md'); L43: const stub = getClaudeMdStub(); ... L47: if (!canUpdateClaudeMd(existing)) { L48: console.log('Skipped CLAUDE.md (custom content outside @AGENTS.md bridge)'); L49: return; ... L51: if (existing.trim() === stub.trim()) { L52: console.log('CLAUDE.md already up to date'); L53: return; Payload evidence from postinstall/detect-agent.js: L24: */ L25: function detectAgent(env = process.env) { L26: const override = env.CFM_SDK_AGENT;

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

postinstall.jsView on unpkg · L24

templates/docs/survey-ui/verify-agent-build.shView file

•path = templates/docs/survey-ui/verify-agent-build.sh kind = build_helper sizeBytes = 10511 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/docs/survey-ui/verify-agent-build.shView on unpkg

Findings

1 Critical5 High5 Medium6 Low

CriticalAi Agent Control Hijackpostinstall.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/cli/index.js

HighSame File Env Network Executiondist/cli/index.js

HighSandbox Evasion Gated Capabilitydist/cli/index.js

HighRuntime Package Installdist/cli/index.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpertemplates/docs/survey-ui/verify-agent-build.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

8 flagged

package.jsonView file

Lines 1-41json

2 "name": "@explorer02/cfm-survey-sdk",

3 "version": "0.8.6",

4 "main": "dist/index.js",

5 "module": "dist/index.mjs",

6 "types": "dist/index.d.ts",

7 "bin": {

8 "cfm-sdk": "./dist/cli/index.js"

9 },

10 "files": [

11 "dist",

12 "templates",

13 "postinstall.js",

14 "postinstall"

15 ],

16 "scripts": {

17 "build": "tsup",

18 "build:all": "npm run build",

19 "prepare": "npm run build",

20 "lint": "tsc --noEmit",

21 "postinstall": "node postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L21

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L21

22 "test": "vitest run",

23 "test:watch": "vitest",

24 "test:coverage": "vitest run --coverage",

25 "docs:sync-manifest": "npx tsx scripts/generate-doc-manifest.ts",

26 "split-survey-ui-config": "npx tsx scripts/split-survey-ui-config.ts",

27 "merge-survey-ui-config": "npx tsx scripts/merge-survey-ui-config.ts",

28 "lint:agent-docs": "bash scripts/lint-agent-docs.sh",

29 "sync-agent-stubs": "node scripts/sync-monorepo-agent-stubs.js"

30 },

31 "peerDependencies": {

32 "react": ">=17.0.0",

33 "@tanstack/react-query": "^5.0.0"

34 },

35 "devDependencies": {

36 "@testing-library/jest-dom": "^6.4.2",

37 "@testing-library/react": "^14.2.1",

38 "@testing-library/user-event": "^14.5.2",

39 "@vitest/coverage-v8": "^1.3.1",

40 "@types/react": "^17.0.0",

41 "@tanstack/react-query": "^5.0.0",

dist/cli/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

postinstall.jsView file

Lines 4-44javascript

4const {

5 NPM_AGENT_PATH,

6 getAgentsMdStub,

7 getCursorRulesStub,

8 getClaudeMdStub,

9 mergeMarkedBlock,

10 canUpdateClaudeMd,

11} = require('./postinstall/agent-stubs'

templates/docs/survey-ui/verify-agent-build.shView file

•path = templates/docs/survey-ui/verify-agent-build.sh kind = build_helper sizeBytes = 10511 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/docs/survey-ui/verify-agent-build.shView on unpkg