registry / @geoly-ai/social-hub-cli / 0.2.10

@geoly-ai/social-hub-cli@0.2.10

social-hub CLI for Social Ops Hub

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `social-hub skills install`, `update`, or `remove`; remote content additionally requires explicit `--source github` or `--source skillsh`.

Impact

Can change instructions available to supported AI agents after explicit CLI use.

Mechanism

User-invoked copy/symlink/removal of skill content in agent skill directories.

Rationale

This is not concrete malicious behavior: the install hook is non-mutating and agent changes require a user-invoked CLI command. It warrants a warning because those commands can write to broad AI-agent skill surfaces and may install explicitly selected remote content.

Evidence

package.jsonpostinstall-guard.cjsdist/postinstall.jsdist/register-skills.jsdist/skills/installer.jsdist/skills/github-source.jsdist/skills/agent-targets.jsdist/config.jsskills/manifest.json

Network endpoints3

redd.eclick-geo.com/apiregistry.npmjs.org/%40geoly-ai%2Fsocial-hub-cli/latest

codeload.github.com/{owner}/{name}/tar.gz/{ref}

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`dist/register-skills.js` executes skill plans for explicit `skills install/update/remove` commands.
`dist/skills/agent-targets.js` targets AI-agent directories including `~/.codex/skills`, `~/.claude/skills`, and `~/.cursor/skills`.
`dist/skills/installer.js` recursively removes and copies or symlinks skill directories into selected targets.
`dist/skills/github-source.js` can download a user-selected GitHub skills tarball and extract it with `tar`.

Evidence against

`postinstall-guard.cjs` only loads `dist/postinstall.js`; that module prints an opt-outable install hint.
No install-time network request, file mutation, credential harvesting, or agent-directory write was found.
Default skill source is the package-bundled `skills/` directory; remote sources require explicit CLI options.
`dist/config.js` stores only package configuration under `~/.config/social-hub` with restrictive permissions.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 56 file(s), 399 KB of source, external domains: codeload.github.com, example.com, github.com, hub.example, redd.eclick-geo.com, registry.npmjs.org, www.reddit.com

Source & flagged code

2 flagged

package.jsonView file

Lines 18-40json

18 "CHANGELOG.md"

19 ],

20 "bin": {

21 "social-hub": "./dist/index.js"

22 },

23 "dependencies": {

24 "commander": "^12.1.0",

25 "@geoly-ai/social-hub-authz": "0.0.4",

26 "@geoly-ai/social-hub-sdk": "0.0.28"

27 },

28 "devDependencies": {

29 "@types/node": "^22.10.2",

30 "typescript": "^5.7.2",

31 "vitest": "^2.1.8"

32 },

33 "scripts": {

34 "copy-skills": "node ../../scripts/copy-skills-to-cli.mjs",

35 "build": "pnpm run copy-skills && tsc && node ../../scripts/generate-cmd-manifest.mjs",

36 "typecheck": "tsc --noEmit",

37 "test": "vitest run",

38 "postinstall": "node postinstall-guard.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

39 }

40}

postinstall-guard.cjsView file

Lines 1-15javascript

1// npm `postinstall` entry. Kept as a always-present CJS shim (outside dist/) so

2// it tolerates a missing build: during in-repo dev installs dist/ may not exist

3// yet, in which case this is a no-op. For published tarballs dist/ is present

4// and we print the install/skills hint. Never throws — install must not fail.

5try {

6 const fs = require("node:fs");

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall-guard.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

postinstall-guard.cjsView file

5try { L6: const fs = require("node:fs"); L7: const path = require("node:path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

postinstall-guard.cjsView on unpkg · L5

Findings

1 High4 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumDynamic Requirepostinstall-guard.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LPM CLI

Source & flagged code

2 flagged

package.jsonView file

Lines 18-40json

18 "CHANGELOG.md"

19 ],

20 "bin": {

21 "social-hub": "./dist/index.js"

22 },

23 "dependencies": {

24 "commander": "^12.1.0",

25 "@geoly-ai/social-hub-authz": "0.0.4",

26 "@geoly-ai/social-hub-sdk": "0.0.28"

27 },

28 "devDependencies": {

29 "@types/node": "^22.10.2",

30 "typescript": "^5.7.2",

31 "vitest": "^2.1.8"

32 },

33 "scripts": {

34 "copy-skills": "node ../../scripts/copy-skills-to-cli.mjs",

35 "build": "pnpm run copy-skills && tsc && node ../../scripts/generate-cmd-manifest.mjs",

36 "typecheck": "tsc --noEmit",

37 "test": "vitest run",

38 "postinstall": "node postinstall-guard.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L38

39 }

40}

postinstall-guard.cjsView file

Lines 1-15javascript

1// npm `postinstall` entry. Kept as a always-present CJS shim (outside dist/) so

2// it tolerates a missing build: during in-repo dev installs dist/ may not exist

3// yet, in which case this is a no-op. For published tarballs dist/ is present

4// and we print the install/skills hint. Never throws — install must not fail.

5try {

6 const fs = require("node:fs");

7

const path = require("node:path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

postinstall-guard.cjsView on unpkg · L5

8 const built = path.join(__dirname, "dist", "postinstall.js");

9 if (fs.existsSync(built)) {

10 import(require("node:url").pathToFileURL(built).href).catch(() => {});

11 }

12} catch {

13 // never fail the install

14}

15