Loading npm security reports…

@g7e6-sdlc/sdlc-cli@1.5.2: AI-agent control-surface risk | LPM Firewall

registry / @g7e6-sdlc/sdlc-cli / 1.5.2

@g7e6-sdlc/sdlc-cli@1.5.2

SDLC 最小集 CLI（sdlc-cli）— 本地即真源的中间产物仓库与工作区装配

AI Security Review

scanned 23d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Package installation writes a global configuration and replaces skills in Claude and generic agent skill directories without a user command. The installed code can later upload session transcript files to remote services.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation, which invokes postinstall.

Impact

It can alter AI-agent behavior across projects and prepare later disclosure of local session transcripts.

Mechanism

Automatic replacement of global AI-agent skills and setup of enabled transcript collection.

Policy narrative

On npm installation, postinstall invokes the package installer. That installer creates or upgrades a global configuration, enables session collection, and removes then copies package-provided skills into ~/.claude/skills and ~/.agents/skills. This is an unconsented mutation of broad, foreign AI-agent control surfaces. The package also contains a session uploader that reads selected transcript files and sends them as multipart POST data to its configured server.

AI rationale

The automatic lifecycle hook mutates broad AI-agent skill directories and installs enabled collection settings without an explicit user setup action. This meets the install-time AI-agent control-surface abuse policy.

Evidence

package.jsondist/cli.js~/.sdlc/config.yaml~/.claude/skills/<skill>~/.agents/skills/<skill>~/.claude/**~/.codex/**

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/cli.js install || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/cli.js install || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli.jsView file

634var DEFAULT_SESSION_EXCLUDE = [ L635: "~/.claude/**", L636: "~/.codex/**", L637: "~/.ssh/**", ... L650: function defaultClaudeHome() { L651: return join(homedir(), ".claude"); L652: } L653: function defaultCodexHome() { L654: const fromEnv = process.env.CODEX_HOME?.trim(); L655: return fromEnv ? fromEnv : join(homedir(), ".codex"); L656: } ... L714: import {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli.jsView on unpkg · L634

•matchType = normalized_sha256 matchedPackage = @g7e6-sdlc/sdlc-cli@1.5.1 matchedPath = dist/cli.js matchedIdentity = npm:QGc3ZTYtc2RsYy9zZGxjLWNsaQ:1.5.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = f3c2e392491470ae signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @g7e6-sdlc/sdlc-cli@1.5.1 matchedPath = dist/cli.js matchedIdentity = npm:QGc3ZTYtc2RsYy9zZGxjLWNsaQ:1.5.1 similarity = 1.000 shingleOverlap = 1 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

dist/cli.jsView on unpkg

13function businessError(message, details) { L14: return new CtxError(ExitCode.Business, message, details); L15: } ... L237: headers: { Authorization: `AK ${spec.archery.accessKey}`, "Content-Type": "application/json" }, L238: body: JSON.stringify({ instance_name: spec.connection.instance, db_name: spec.connection.database, sql, limit: MAX_RESULT_ITEMS + 1 }), L239: signal L240: }); L241: const text = await response.text(); L242: let body; ... L616: var DEFAULT_APOLLO_SERVERS = { L617: dev: "http://apollo-api.dev.chinawayltd.com:8080", L618: test: "http://apollo-api.test.chinawayltd.com:8080",

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L13

skills/importing-artifacts/scripts/scan_source.pyView file

•path = skills/importing-artifacts/scripts/scan_source.py kind = build_helper sizeBytes = 5479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/importing-artifacts/scripts/scan_source.pyView on unpkg