@godxjp/ui@19.4.2: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@godxjp/ui@19.4.2: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/data-display/credential-reveal.tsxView file

116patternName = stripe_webhook_secret severity = high line = 116

High

High Secret

Package contains a high-severity secret pattern.

docs/data-display/credential-reveal.tsxView on unpkg · L116

116patternName = stripe_webhook_secret severity = high line = 116

High

Secret Pattern

Stripe webhook signing secret in docs/data-display/credential-reveal.tsx

docs/data-display/credential-reveal.tsxView on unpkg · L116

scripts/postinstall.mjsView file

2Install-time code directly mutates a foreign AI-agent control surface: L2: /** L3: * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live L4: * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only ... L15: const r = ensureMcpJson(root); L16: // The mandate is plain text the agent reads every turn (CLAUDE.md block + workflow file). It L17: // changes nothing in the dev loop, so it is installed by default: an agent that never saw the ... L22: console.log( L23: `\n @godxjp/ui → MCP in .mcp.json (${r}); workflow mandate in CLAUDE.md (${md}).\n` + L24: " Your agent now has live component + audit guidance. Restart it to pick up the MCP.\n" + Write operation from scripts/_agent-setup.mjs: L6: */ L7: import { existsSyn

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L2

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 368-408json

368 "gen:email-tokens": "node scripts/gen-email-tokens.mjs",

369 "check:core-isolation": "node scripts/check-core-isolation.mjs",

370 "check:no-consumer-coupling": "node scripts/check-no-consumer-coupling.mjs",

371 "release": "node scripts/release.mjs",

372 "preview": "node preview/scripts/kill-port.mjs && vite --config preview/vite.config.ts --port 6008 --strictPort",

373 "preview:build": "vite build --config preview/vite.config.ts && node scripts/gen-registry.mjs",

374 "gen:registry": "node scripts/gen-registry.mjs",

375 "check:registry": "node scripts/gen-registry.mjs --check",

376 "docs:sync-primitives": "node preview/scripts/sync-primitive-docs.mjs && prettier --write \"docs/primitives/**/*.tsx\"",

377 "audit": "node scripts/ui-audit.mjs",

378 "audit:examples": "node scripts/ui-audit.mjs docs",

379 "build": "tsup && tsc -p tsconfig.build.json && node scripts/copy-styles.mjs && node scripts/fix-esm-extensions.mjs && node scripts/add-use-client.mjs",

380 "dev": "node scripts/dev.mjs",

381 "prepublishOnly": "pnpm run build",

382 "check:audit-sync": "node scripts/check-audit-sync.mjs",

383 "check:contrast": "node scripts/check-contrast.mjs",

384 "visual-audit": "node scripts/visual-audit.mjs",

385 "check:visual-audit": "node scripts/visual-audit-smoke.mjs",

386 "check:frame-axe": "node scripts/check-frame-axe.mjs",

387 "check:frame-geometry": "node scripts/frame-geometry.mjs",

388 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L388

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L388

389 "init-agent": "node scripts/init-agent-kit.mjs",

390 "check:use-client": "node scripts/check-use-client.mjs"

391 },

392 "peerDependencies": {

393 "@axe-core/playwright": "*",

394 "@hookform/resolvers": "^5.2.0",

395 "@tanstack/react-query": ">=5.0.0",

396 "axe-core": "*",

397 "playwright": "*",

398 "react": ">=19.0.0",

399 "react-dom": ">=19.0.0",

400 "react-hook-form": "^7.76.0",

401 "react-router-dom": ">=7.0.0",

402 "recharts": "^2.13.0 || ^3.0.0",

403 "tailwindcss": ">=4.0.0",

404 "zod": "^4.4.0"

405 },

406 "peerDependenciesMeta": {

407 "recharts": {

408 "optional": true

docs/data-display/credential-reveal.tsxView file

Lines 96-136tsx

96 <CardTitle level={2}>Tone</CardTitle>

97 <CardDescription>

98 警告帯の severity は tone。warning（既定）は保管を促す通常の一度きり表示、destructive

99 は失効・再発行が必要な重大な扱い、info は運用上の補足に使います。

100 </CardDescription>

scripts/postinstall.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live

4 * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only

5 * adds a missing server entry) and guarded so it never runs in CI or in the library's own repo.

6 */

7import { ensureClaudeMd, ensureMcpJson, shouldSkip, writeWorkflowMd } from "./_agent-setup.mjs";

8

9const

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg