registry / @g7e6-sdlc/sdlc-cli / 1.5.1

@g7e6-sdlc/sdlc-cli@1.5.1

SDLC 最小集 CLI（sdlc-cli）— 本地即真源的中间产物仓库与工作区装配

AI Security Review

scanned 24d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically alters global AI-agent skill directories and global CLI configuration. It replaces bundled skill directories without a user command or consent.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation, through postinstall

Impact

The package can change instructions available to Claude and other agent tooling across the user's environment.

Mechanism

Automatic replacement of global agent skills and configuration

Policy narrative

On npm installation, postinstall invokes the package's install command. That command creates or updates ~/.sdlc/config.yaml and copies every bundled SKILL.md directory into ~/.claude/skills and ~/.agents/skills. Before copying, it recursively removes any destination directory with the same name. This is an unconsented install-time mutation of broad AI-agent control surfaces, so users can receive package-authored agent instructions without explicitly running setup.

AI rationale

The automatic lifecycle hook makes broad AI-agent instruction changes, including recursive replacement of existing skill directories. This meets the install-time foreign control-surface mutation block policy.

Evidence

package.jsondist/cli.js~/.claude/skills/<bundled-skill>~/.agents/skills/<bundled-skill>~/.sdlc/config.yaml

Decision evidence

public snapshot

@g7e6-sdlc/sdlc-cli@1.5.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code