registry / @geraldmaron/construct / 1.5.3

@geraldmaron/construct@1.5.3

Construct — agent orchestration layer for OpenCode, Claude Code, and other coding surfaces

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM blocks this version under the AI-agent control-surface policy. Confirmed unconsented npm postinstall mutation of broad AI-agent control surfaces in the installing project. The package stages Construct launchers and agent/MCP configuration for multiple editors without an explicit user command.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm install of @geraldmaron/construct in a consumer project

Impact

Can alter Claude Code, Codex, VS Code, Cursor, Copilot, OpenCode agent routing and MCP tool availability for the project immediately after install.

Mechanism

postinstall stages project launchers and syncs AI-agent adapters/configs

Policy narrative

On npm install, package.json invokes bin/construct-postinstall.mjs. For a consumer project with package.json, the hook calls stageProjectAdapters, which writes .construct launchers and spawns scripts/sync-specialists.mjs --project. That script creates or mutates project AI-agent control files for Claude Code, Codex, VS Code, Cursor, Copilot/OpenCode and MCP wiring. This is package-aligned functionality and includes skip/global safeguards, but it is still unconsented install-time mutation of broad AI-agent control surfaces.

Rationale

Source inspection confirms install-time project AI-agent configuration mutation, which matches the firewall block policy even though scanner exfiltration hints were noisy. No concrete credential exfiltration or destructive payload was found, but the postinstall control-surface write is sufficient for a block verdict. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonbin/construct-postinstall.mjslib/install/stage-project.mjsscripts/sync-specialists.mjslib/hooks/scan-secrets.mjslib/mcp/tools/memory.mjs<project>/.construct/run.mjs<project>/.construct/bootstrap.sh<project>/.construct/bootstrap.ps1<project>/.construct/version<project>/.construct/stage-state.json<project>/.construct/install-manifest.json<project>/.gitignore<project>/.claude/agents/construct.md<project>/.claude/settings.json<project>/.claude/skills/*/SKILL.md<project>/.mcp.json<project>/.codex/config.toml<project>/.codex/agents/*.toml

Decision evidence

public snapshot

AI called this Malicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for policy block

package.json defines postinstall: node ./bin/construct-postinstall.mjs.
bin/construct-postinstall.mjs runs stageProjectAdapters for consumer projects during npm install.
lib/install/stage-project.mjs spawns scripts/sync-specialists.mjs --project in the consumer project.
scripts/sync-specialists.mjs project mode writes broad AI-agent configs: .claude, .codex, .mcp.json, .vscode, .cursor, .github/Copilot adapters.
Postinstall also writes .construct launchers/state/install-manifest and appends Construct ignore patterns to .gitignore.

Evidence against

Global install exits with guidance instead of writing user-scope agent config.
CONSTRUCT_SKIP_POSTINSTALL=1 disables the hook.
lib/hooks/scan-secrets.mjs is a defensive local secret scanner, not credential harvesting.
lib/mcp/tools/memory.mjs stores/searches local observations; Rovo search is user-invoked and credential-gated.
Network endpoints found are package-aligned provider/model/telemetry APIs, not install-time exfiltration.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 752 file(s), 5.23 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.atlassian.com, api.github.com, api.githubcopilot.com, api.linear.app, api.openai.com, app.slack.com, astral.sh, d2lang.com, developer.1password.com, docs.docker.com, example.com, fonts.googleapis.com, generativelanguage.googleapis.com, github.com, graphviz.org, huggingface.co, json-schema.org, nodejs.org, ollama.com, opencode.ai, openrouter.ai, pandoc.org, raw.githubusercontent.com, schemas.openxmlformats.org, slack.com, www.apple.com, www.libreoffice.org, your-domain.atlassian.net

Source & flagged code

18 flagged

package.jsonView file

Lines 81-121json

81 "build:binary:fallback": "node scripts/build-sea.mjs",

82 "examples:deck": "node scripts/generate-deck-examples.mjs",

83 "examples:distribution": "node scripts/generate-distribution-examples.mjs",

84 "clean:artifacts": "node scripts/clean-artifacts.mjs",

85 "lint:scopes": "node scripts/lint-scopes.mjs",

86 "catalog:regen": "node scripts/catalog-regen.mjs",

87 "catalog:validate": "node scripts/catalog-validate.mjs",

88 "workflow-defs:check": "node scripts/check-workflow-defs-drift.mjs --check",

89 "docs:sync": "node scripts/docs-sync.mjs",

90 "learning:status": "node scripts/learning-status.mjs",

91 "lint:templates": "node scripts/lint-commits-pr.mjs",

92 "eval:routing": "node scripts/eval/score-intent-classifier.mjs",

93 "adapters": "node lib/adapters-sync.mjs",

94 "release:check": "npm run doctor && node ./bin/construct registry:validate --unified && npm run catalog:validate -- --check && npm run workflow-defs:check && npm test && node scripts/release-evidence-gate.mjs --skip-tests && npm run docs:update -- --check && npm run docs:site -- --check && npm run docs:sync -- --check && node ./bin/construct registry:generate-docs --check && npm run docs:verify -- --strict && node scripts/alignment/census.mjs --ratchet && npm run lint:comments && node ./bin/construct certify gate && npm run graph:gate && npm run lint:templates",

95 "release:gate": "node --test tests/functional/release-gate.functional.test.mjs",

96 "audit:published": "node scripts/audit-published-artifact.mjs",

97 "version": "node scripts/sync-construct-version.mjs && git add -f .construct/version",

98 "release:preflight": "node scripts/pre-release-check.mjs",

99 "release:preflight:no-auth": "node scripts/pre-release-check.mjs --skip-auth",

100 "npm:publish": "npm run release:check && npm publish --access public",

101 "postinstall": "node ./bin/construct-postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L101

102 "deps:check": "node scripts/validate-dep-intent.mjs"

103 },

104 "dependencies": {

105 "@lancedb/lancedb": "^0.31.0",

106 "@modelcontextprotocol/sdk": "^1.12.0",

107 "apache-arrow": "^18.1.0",

108 "js-yaml": "^4.2.0"

109 },

110 "optionalDependencies": {

111 "@ai-sdk/anthropic": "^3.0.85",

112 "@ai-sdk/openai": "^3.0.73",

113 "@ai-sdk/openai-compatible": "^2.0.51",

114 "@huggingface/transformers": "^4.2.0",

115 "@opentelemetry/api": "^1.9.0",

116 "ai": "^6.0.208",

117 "ink": "^7.1.0",

118 "mammoth": "^1.12.0",

119 "postgres": "^3.4.9",

120 "pptx-embed-fonts": "^0.0.6",

121 "pptxgenjs": "^4.0.1",

lib/hooks/scan-secrets.mjsView file

Lines 27-67javascript

27 /YOUR_KEY/i,

28 /<[^>]+>/,

29 /^sk-\.\.\./,

30 /^pk-lf-\.\.\./,

31 /__[A-Z_]+__/,

32];

34// Patterns are matched per-line so multiple findings in one file are

35// surfaced together. Capture group 1 is included in the JSONL log if

36// present; otherwise the full match is used.

37const SECRET_PATTERNS = [

38 { name: 'Anthropic API key', pattern: /ANTHROPIC_API_KEY\s*=\s*(sk-ant-[a-zA-Z0-9\-_]{20,})/i },

39 { name: 'Anthropic admin key', pattern: /(sk-ant-admin-[a-zA-Z0-9\-_]{20,})/ },

40 { name: 'OpenAI API key', pattern: /OPENAI_API_KEY\s*=\s*(sk-[a-zA-Z0-9]{40,})/i },

41 { name: 'OpenAI project key', pattern: /(sk-proj-[a-zA-Z0-9_\-]{40,})/ },

42 { name: 'OpenAI organization key', pattern: /(sk-svcacct-[a-zA-Z0-9_\-]{40,})/ },

43 { name: 'OpenRouter key', pattern: /(sk-or-v1-[a-zA-Z0-9]{40,})/ },

44 { name: 'AWS access key', pattern: /(AKIA[0-9A-Z]{16})/ },

45 { name: 'AWS secret access key', pattern: /aws[_\-]?secret[_\-]?access[_\-]?key\s*[:=]\s*['"]?([A-Za-z0-9\/\+=]{40})/i },

46 { name: 'AWS session token', pattern: /(ASIA[0-9A-Z]{16})/ },

47 { name: 'GCP service account JSON key', pattern: /"private_key"\s*:\s*"-----BEGIN PRIVATE KEY-----/ },

Critical

Critical Secret

Package contains a critical-looking secret pattern.

lib/hooks/scan-secrets.mjsView on unpkg · L47

48 { name: 'GCP API key', pattern: /(AIza[0-9A-Za-z\-_]{35})/ },

49 { name: 'Azure storage account key', pattern: /AccountKey\s*=\s*([A-Za-z0-9\+\/=]{88})/ },

50 { name: 'Private key (PEM)', pattern: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/ },

51 { name: 'SSH private key', pattern: /-----BEGIN OPENSSH PRIVATE KEY-----/ },

52 { name: 'GitHub personal access token (classic)', pattern: /(ghp_[a-zA-Z0-9]{36})/ },

53 { name: 'GitHub fine-grained PAT', pattern: /(github_pat_[A-Z0-9]{22}_[A-Za-z0-9]{59})/ },

54 { name: 'GitHub Actions token', pattern: /(ghs_[a-zA-Z0-9]{36})/ },

55 { name: 'GitHub OAuth token', pattern: /(gho_[a-zA-Z0-9]{36})/ },

56 { name: 'GitHub user-to-server token', pattern: /(ghu_[a-zA-Z0-9]{36})/ },

57 { name: 'GitHub server-to-server token', pattern: /(ghr_[a-zA-Z0-9]{36})/ },

58 { name: 'Slack bot token', pattern: /(xoxb-[0-9]{10,}-[0-9]{10,}-[a-zA-Z0-9]{24,})/ },

59 { name: 'Slack user token', pattern: /(xoxp-[0-9]{10,}-[0-9]{10,}-[0-9]{10,}-[a-z0-9]{32,})/ },

60 { name: 'Slack webhook URL', pattern: /(https:\/\/hooks\.slack\.com\/services\/T[A-Z0-9]+\/B[A-Z0-9]+\/[A-Za-z0-9]{24})/ },

61 { name: 'Stripe live secret', pattern: /(sk_live_[A-Za-z0-9]{20,})/ },

62 { name: 'Stripe restricted key', pattern: /(rk_live_[A-Za-z0-9]{20,})/ },

63 { name: 'Twilio account SID', pattern: /(AC[a-f0-9]{32})/ },

64 { name: 'Twilio auth token', pattern: /TWILIO_AUTH_TOKEN\s*=\s*([a-f0-9]{32})/i },

65 { name: 'SendGrid API key', pattern: /(SG\.[a-zA-Z0-9_\-]{22}\.[a-zA-Z0-9_\-]{43})/ },

66 { name: 'Mailgun API key', pattern: /(key-[a-z0-9]{32})/ },

67 { name: 'JWT (signed)', pattern: /(eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_\-]{10,})/ },

47patternName = private_key_rsa severity = critical line = 47 matchedText = { name: .../ },

Critical

Secret Pattern

RSA private key in lib/hooks/scan-secrets.mjs

lib/hooks/scan-secrets.mjsView on unpkg · L47

51patternName = private_key_openssh severity = critical line = 51 matchedText = { name: .../ },

Critical

Secret Pattern

OpenSSH private key in lib/hooks/scan-secrets.mjs

lib/hooks/scan-secrets.mjsView on unpkg · L51

platforms/opencode/sync-config.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/**

3 * sync-config.mjs — Fetch free models from OpenRouter and local models from Ollama,

4 * and sync into OpenCode config.

5 */

6import fs from "node:fs";

7import { spawnSync } from "node:child_process";

8import { readOpenCodeConfig, writeOpenCodeConfig, findOpenCodeConfigPath } from "../../lib/opencode-config.mjs";

High

Child Process

Package source references child process execution.

platforms/opencode/sync-config.mjsView on unpkg · L6

9import { ensureLocalContextVariants, modelDigest } from "../../lib/ollama/provision-context.mjs";

10import { isKnownCollapsed } from "../../lib/ollama/capability-store.mjs";

12const LOCAL_NUM_CTX = Number(process.env.CONSTRUCT_LOCAL_NUM_CTX) || 32768;

14const configPath = findOpenCodeConfigPath();

16async function fetchLocalOllamaModels() {

17 try {

18 const r = spawnSync("ollama", ["list"], { encoding: "utf8" });

19 if (r.status !== 0) return [];

21 const lines = r.stdout.trim().split("\n").slice(1);

22 const models = lines.map(line => {

23 const parts = line.split(/\s+/).filter(Boolean);

24 const id = parts[0];

25 const size = parts[2];

26 return { id, name: id, size };

templates/distribution/run.mjsView file

Lines 198-234javascript

198 ];

199 if (hostConstructDir) {

200 dockerArgs.push('-v', `${hostConstructDir}:/data/.construct`);

201 }

202 dockerArgs.push(image, ...process.argv.slice(2));

203 runForeground('docker', dockerArgs);

204 return true;

205}

206

207function fail() {

208 const v = readPinnedVersion();

209 process.stderr.write(

210 '[construct] No Construct install found.\n' +

211 '\n' +

212 ' This project pins Construct' + (v ? ` ${v}` : '') + ' but no runtime resolved.\n' +

213 '\n' +

214 ' Pick one:\n' +

215 ' - Install Node.js 18+ from https://nodejs.org and re-run.\n' +

216 ' - Install Construct globally: npm install -g @geraldmaron/construct\n' +

217 ' - Install Docker: docker pull ghcr.io/geraldmaron/construct\n' +

218 ' - Bootstrap a binary: ./.construct/bootstrap.sh (POSIX)\n' +

219 ' powershell -File .construct/bootstrap.ps1 (Windows)\n'

220 );

High

Shell

Package source references shell execution.

templates/distribution/run.mjsView on unpkg · L218

221 process.exit(127);

222}

223

224const version = readPinnedVersion();

225

226if (tryDevPath()) { /* spawned */ }

227else if (trySelfRepo()) { /* spawned */ }

228else if (tryNodeModules()) { /* spawned */ }

229else if (tryNpx(version)) { /* spawned */ }

230else if (tryGlobal()) { /* spawned */ }

231else if (tryCachedBinary()) { /* spawned */ }

232else if (tryDocker(version)) { /* spawned */ }

233else fail();

234

lib/deck-export-pptx.mjsView file

Lines 1-39javascript

1/**

2 * lib/deck-export-pptx.mjs — markdown slide deck → branded PPTX via pptxgenjs.

3 *

4 * Parses slides (---), tables, lists, and inline bold into a 16:9 deck with

5 * Construct ink chrome: title band, heading rules, callout cards, styled tables,

6 * and footer bar matching templates/distribution/construct-deck.html.

7 */

9import fs from 'node:fs';

10import os from 'node:os';

11import { createRequire } from 'node:module';

12import { spawnSync, execSync } from 'node:child_process';

13import { fileURLToPath, pathToFileURL } from 'node:url';

14import path from 'node:path';

15import { BRAND_TOKENS, INK } from './brand-tokens.mjs';

16import { createPptxGenerator, embedBundledSansInPptx, embedBundledMonoInPptx, BRAND_SANS_FAMILY } from './brand-fonts.mjs';

17import { parseArtifactMetadata } from './publish-template.mjs';

18import { injectMermaidBrandTheme, injectD2DistributionDefaults, buildDistributionDiagramEnv } from './diagram-export.mjs';

20const require = createRequire(import.meta.url);

21const MODULE_URL = pathToFileURL(fileURLToPath(import.meta.url)).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/deck-export-pptx.mjsView on unpkg · L19

22const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');

24const EMU_PER_IN = 914400;

26const W = 10;

27const H = 5.625;

28const MX = 0.54;

29const MY = 0.41;

30const CW = W - MX * 2;

31const FOOT_BAR_H = 0.045;

32const FOOT_Y = H - FOOT_BAR_H - 0.34;

33const CONTENT_TOP = 1.02;

34const CONTENT_MAX_Y = FOOT_Y - 0.1;

35const SAFE_RIGHT = W - MX;

36export const SLIDE_CONTENT_BUDGET_IN = CONTENT_MAX_Y - CONTENT_TOP;

37export const SLIDE_W_IN = W;

38export const SLIDE_H_IN = H;

1323missing: ['pptxgenjs'], L1324: message: 'Install pptxgenjs to enable PPTX export (`npm install pptxgenjs` in the Construct package).', L1325: }; ... L1328: const payload = Buffer.from(JSON.stringify(opts)).toString('base64'); L1329: const child = spawnSync(process.execPath, [ L1330: '--input-type=module',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/deck-export-pptx.mjsView on unpkg · L1323

lib/roles/event-bus.mjsView file

Lines 2-42javascript

2 * lib/roles/event-bus.mjs — append-only event log per project.

3 *

4 * Hook processes emit failure/signal events here. The router + gateway read

5 * recent events to decide escalation. Lines are rotated to keep the file

6 * bounded. Fingerprint = sha1(type + project + first summary line) so the

7 * same failure dedups across emits.

8 *

9 * Path resolution: events.jsonl lives at <project>/.cx/ when the cwd sits

10 * inside a Construct project, otherwise at ~/.cx/. Without per-project

11 * isolation, fingerprints from project A suppress real events in project B.

12 * Override the directory with CONSTRUCT_ROLES_ROOT for tests.

13 */

15import { createHash } from 'node:crypto';

16import { existsSync, readFileSync, appendFileSync, writeFileSync, mkdirSync } from 'node:fs';

17import { dirname, join } from 'node:path';

18import { resolveProjectScopedPath } from '../project-root.mjs';

20const MAX_LINES = 1000;

22function eventsPath() {

23 if (process.env.CONSTRUCT_ROLES_ROOT) {

24 return join(process.env.CONSTRUCT_ROLES_ROOT, 'events.jsonl');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/roles/event-bus.mjsView on unpkg · L22

25 }

26 return resolveProjectScopedPath('events.jsonl', { ensureDir: false });

27}

28function ensureDir() {

29 const dir = dirname(eventsPath());

30 if (!existsSync(dir)) mkdirSync(dir, { recursive: true });

31}

33export function fingerprintOf(type, project, summary) {

34 const firstLine = String(summary || '').split('\n')[0].trim();

35 return createHash('sha1').update(`${type}|${project}|${firstLine}`).digest('hex').slice(0, 16);

36}

38export function emit(eventType, payload = {}) {

39 ensureDir();

40 const project = payload.project || '';

41 const summary = payload.summary || '';

42 const fingerprint = fingerprintOf(eventType, project, summary);

lib/embed/supervision.mjsView file

Lines 1-29javascript

1/**

2 * lib/embed/supervision.mjs — platform supervisor integration for the embed daemon.

3 *

4 * Writes a platform service file so the embed daemon is automatically

5 * restarted with exponential backoff if it crashes, and started on login/boot.

6 *

7 * Platform support:

8 * macOS — launchd plist at ~/Library/LaunchAgents/com.construct.embed.plist

9 * Linux — systemd user unit at ~/.config/systemd/user/construct-embed.service

10 * Windows — Task Scheduler (schtasks) entry named "Construct.Embed"

11 *

12 * Usage:

13 * import { installSupervision, uninstallSupervision, supervisionStatus } from './supervision.mjs';

14 * await installSupervision();

15 * await uninstallSupervision();

16 * const info = await supervisionStatus();

17 */

19import fs from 'node:fs';

20import os from 'node:os';

21import path from 'node:path';

22import { spawnSync } from 'node:child_process';

24import { stateDir, doctorRoot } from '../config/xdg.mjs';

26const HOME = os.homedir();

27const PLATFORM = process.platform;

28const NODE_BIN = process.execPath;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/embed/supervision.mjsView on unpkg · L9

lib/runtime/whisper-bootstrap.mjsView file

Lines 3-43javascript

3 *

4 * Strategy (2026-06):

5 * 1. Prefer system-installed whisper-cli (or legacy `main`) on PATH —

6 * `brew install whisper-cpp` (macOS, Metal-accelerated) or distro

7 * package on Linux.

8 * 2. Fall back to bundled `whisper-cli` cached at <runtimeDir>/bin/ if a

9 * previous bootstrap fetched one.

10 * 3. If neither, return a structured "not-available" descriptor — caller

11 * surfaces a user-actionable install hint rather than crashing.

12 *

13 * Model files are downloaded directly from Hugging Face the first time the

14 * default `base.en` (or env-overridden) model is requested. Models cache at

15 * <stateRoot>/runtime/whisper/models/ (ADR-0066: machine-scoped, not

16 * project-local). base.en is ~150MB; smaller than the small.en or medium.en

17 * model that callers can opt into via CONSTRUCT_WHISPER_MODEL.

18 *

19 * No bundled distribution: whisper.cpp upstream does not publish stable

20 * pre-built CLI binaries across platforms, and building from source via

21 * cmake adds a heavyweight first-run path. Defer that to a future opt-in.

22 */

23import { existsSync, mkdirSync, statSync, createWriteStream } from 'node:fs';

24import { spawnSync } from 'node:child_process';

25import { pipeline } from 'node:stream/promises';

26import path from 'node:path';

27import os from 'node:os';

29import { resolveStateDir } from '../state-root.mjs';

31const HF_MODEL_BASE_URL = 'https://huggingface.co/ggerganov/whisper.cpp/resolve/main';

32const DEFAULT_MODEL = process.env.CONSTRUCT_WHISPER_MODEL || 'base.en';

33const KNOWN_MODELS = new Set(['tiny', 'tiny.en', 'base', 'base.en', 'small', 'small.en', 'medium', 'medium.en', 'large-v3', 'large-v3-turbo']);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/runtime/whisper-bootstrap.mjsView on unpkg · L23

35// ensureDir:false — shared by the provisioner (ensureWhisperRuntime, which

36// already mkdirs before it writes) and the read-only detector

37// (describeWhisperRuntime/locateWhisperBinary); a detect-only call must not

38// conjure the dir.

40export function defaultRuntimeDir(cwd = process.cwd()) {

41 return resolveStateDir(cwd, 'runtime', 'whisper', { ensureDir: false });

42}

lib/mcp/tools/memory.mjsView file

14export async function memorySearch(args) { L15: const cwd = args.cwd ? resolve(String(args.cwd)) : process.cwd(); L16: const project = args.project || null; ... L28: try { L29: const hybrid = await buildHybridSearchResultsAsync(cwd, query, { limit, env: process.env }); L30: hybridResults = (hybrid.results || []).map((r) => ({ ... L177: const cloudId = process.env.ATLASSIAN_CLOUD_ID || 'hashicorp.atlassian.net'; L178: const res = await fetch(`https://api.atlassian.com/rovo/v1/search`, { L179: method: 'POST', ... L183: }, L184: body: JSON.stringify({ query, limit: topK }), L185: });

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

lib/mcp/tools/memory.mjsView on unpkg · L14

lib/libreoffice-export.mjsView file

9import path from 'node:path'; L10: import { spawnSync } from 'node:child_process'; L11: ... L18: function whichBin(name, env) { L19: const cmd = process.platform === 'win32' ? 'where' : 'which'; L20: const result = spawnSync(cmd, [name], { encoding: 'utf8', env }); L21: if (result.status !== 0) return null; L22: return (result.stdout || '').trim().split('\n')[0] || null; L23: } L24: L25: export function resolveLibreOfficeBin(env = process.env, { existsSyncFn = fs.existsSync } = {}) { L26: const fromEnv = (env.CONSTRUCT_LIBREOFFICE_BIN || env.SOFFICE_BIN || '').trim();

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/libreoffice-export.mjsView on unpkg · L9

lib/document-extract/docling-sidecar.pyView file

•path = lib/document-extract/docling-sidecar.py kind = build_helper sizeBytes = 6406 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/document-extract/docling-sidecar.pyView on unpkg

templates/distribution/construct-reference.docxView file

•path = [redacted]-reference.docx kind = high_entropy_blob sizeBytes = 11466 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

templates/distribution/construct-reference.docxView on unpkg

•path = [redacted]-reference.docx kind = compressed_blob sizeBytes = 11466 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

templates/distribution/construct-reference.docxView on unpkg

•path = [redacted]-reference.docx kind = nested_archive_needs_inspection sizeBytes = 11466 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

templates/distribution/construct-reference.docxView on unpkg

lib/doctor/watchers/mcp-protocol.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @geraldmaron/construct@1.4.2 matchedIdentity = npm:QGdlcmFsZG1hcm9uL2NvbnN0cnVjdA:1.4.2 similarity = 0.408 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/doctor/watchers/mcp-protocol.mjsView on unpkg

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./bin/construct-postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

lib/hooks/scan-secrets.mjsView file

47patternName = private_key_rsa severity = critical line = 47 matchedText = { name: .../ },

Critical

Critical Secret

Package contains a critical-looking secret pattern.

lib/hooks/scan-secrets.mjsView on unpkg · L47

47patternName = private_key_rsa severity = critical line = 47 matchedText = { name: .../ },

Critical

Secret Pattern

RSA private key in lib/hooks/scan-secrets.mjs

lib/hooks/scan-secrets.mjsView on unpkg · L47

51patternName = private_key_openssh severity = critical line = 51 matchedText = { name: .../ },

Critical

Secret Pattern

OpenSSH private key in lib/hooks/scan-secrets.mjs

lib/hooks/scan-secrets.mjsView on unpkg · L51

platforms/opencode/sync-config.mjsView file

6import fs from "node:fs"; L7: import { spawnSync } from "node:child_process"; L8: import { readOpenCodeConfig, writeOpenCodeConfig, findOpenCodeConfigPath } from "../../lib/opencode-config.mjs";

High

Child Process

Package source references child process execution.

platforms/opencode/sync-config.mjsView on unpkg · L6

templates/distribution/run.mjsView file

218' - Bootstrap a binary: ./.construct/bootstrap.sh (POSIX)\n' + L219: ' powershell -File .construct/bootstrap.ps1 (Windows)\n' L220: );

High

Shell

Package source references shell execution.

templates/distribution/run.mjsView on unpkg · L218

lib/deck-export-pptx.mjsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

lib/deck-export-pptx.mjsView on unpkg · L1323

19L20: const require = createRequire(import.meta.url); L21: const MODULE_URL = pathToFileURL(fileURLToPath(import.meta.url)).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/deck-export-pptx.mjsView on unpkg · L19

lib/roles/event-bus.mjsView file

22function eventsPath() { L23: if (process.env.CONSTRUCT_ROLES_ROOT) { L24: return join(process.env.CONSTRUCT_ROLES_ROOT, 'events.jsonl'); ... L78: let entry; L79: try { entry = JSON.parse(raw[i]); } catch { continue; } L80: if (since && entry.ts < since) break;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/roles/event-bus.mjsView on unpkg · L22

lib/embed/supervision.mjsView file

9* Linux — systemd user unit at ~/.config/systemd/user/construct-embed.service L10: * Windows — Task Scheduler (schtasks) entry named "Construct.Embed" L11: * ... L21: import path from 'node:path'; L22: import { spawnSync } from 'node:child_process'; L23: ... L25: L26: const HOME = os.homedir(); L27: const PLATFORM = process.platform; L28: const NODE_BIN = process.execPath; ... L34: const result = spawnSync('which', ['construct'], { encoding: 'utf8' }); L35: return result.status === 0 ? result.stdout.trim() : 'construct';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

lib/embed/supervision.mjsView on unpkg · L9

lib/runtime/whisper-bootstrap.mjsView file

23import { existsSync, mkdirSync, statSync, createWriteStream } from 'node:fs'; L24: import { spawnSync } from 'node:child_process'; L25: import { pipeline } from 'node:stream/promises'; ... L30: L31: const HF_MODEL_BASE_URL = 'https://huggingface.co/ggerganov/whisper.cpp/resolve/main'; L32: const DEFAULT_MODEL = process.env.CONSTRUCT_WHISPER_MODEL || 'base.en'; L33: const KNOWN_MODELS = new Set(['tiny', 'tiny.en', 'base', 'base.en', 'small', 'small.en', 'medium', 'medium.en', 'large-v3', 'large-v3-turbo']);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/runtime/whisper-bootstrap.mjsView on unpkg · L23

lib/mcp/tools/memory.mjsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

lib/mcp/tools/memory.mjsView on unpkg · L14

lib/libreoffice-export.mjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

lib/libreoffice-export.mjsView on unpkg · L9

lib/document-extract/docling-sidecar.pyView file

•path = lib/document-extract/docling-sidecar.py kind = build_helper sizeBytes = 6406 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/document-extract/docling-sidecar.pyView on unpkg

templates/distribution/construct-reference.docxView file

•path = [redacted]-reference.docx kind = high_entropy_blob sizeBytes = 11466 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

templates/distribution/construct-reference.docxView on unpkg

•path = [redacted]-reference.docx kind = compressed_blob sizeBytes = 11466 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

templates/distribution/construct-reference.docxView on unpkg

•path = [redacted]-reference.docx kind = nested_archive_needs_inspection sizeBytes = 11466 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

templates/distribution/construct-reference.docxView on unpkg

lib/doctor/watchers/mcp-protocol.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/doctor/watchers/mcp-protocol.mjsView on unpkg

Findings

5 Critical7 High7 Medium7 Low

CriticalCritical Secretlib/hooks/scan-secrets.mjs

CriticalCredential Exfiltrationlib/mcp/tools/memory.mjs

CriticalPrevious Version Dangerous Deltalib/doctor/watchers/mcp-protocol.mjs

CriticalSecret Patternlib/hooks/scan-secrets.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processplatforms/opencode/sync-config.mjs

HighShelltemplates/distribution/run.mjs

HighSame File Env Network Executionlib/runtime/whisper-bootstrap.mjs

HighSandbox Evasion Gated Capabilitylib/libreoffice-export.mjs

HighRuntime Package Installlib/deck-export-pptx.mjs

HighShips High Entropy Blobtemplates/distribution/construct-reference.docx

MediumDynamic Requirelib/deck-export-pptx.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencelib/embed/supervision.mjs

MediumShips Build Helperlib/document-extract/docling-sidecar.py

MediumShips Compressed Blobtemplates/distribution/construct-reference.docx

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowWeak Cryptolib/roles/event-bus.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectiontemplates/distribution/construct-reference.docx