@godxjp/ui@19.6.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@godxjp/ui@19.6.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/data-display/credential-reveal.tsxView file

116patternName = stripe_webhook_secret severity = high line = 116

High

High Secret

Package contains a high-severity secret pattern.

docs/data-display/credential-reveal.tsxView on unpkg · L116

116patternName = stripe_webhook_secret severity = high line = 116

High

Secret Pattern

Stripe webhook signing secret in docs/data-display/credential-reveal.tsx

docs/data-display/credential-reveal.tsxView on unpkg · L116

scripts/postinstall.mjsView file

2Install-time code directly mutates a foreign AI-agent control surface: L2: /** L3: * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live L4: * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only ... L15: const r = ensureMcpJson(root); L16: // The mandate is plain text the agent reads every turn (CLAUDE.md block + workflow file). It L17: // changes nothing in the dev loop, so it is installed by default: an agent that never saw the ... L22: console.log( L23: `\n @godxjp/ui → MCP in .mcp.json (${r}); workflow mandate in CLAUDE.md (${md}).\n` + L24: " Your agent now has live component + audit guidance. Restart it to pick up the MCP.\n" + Write operation from scripts/_agent-setup.mjs: L6: */ L7: import { existsSyn

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L2

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 372-412json

372 "gen:email-tokens": "node scripts/gen-email-tokens.mjs",

373 "check:core-isolation": "node scripts/check-core-isolation.mjs",

374 "check:no-consumer-coupling": "node scripts/check-no-consumer-coupling.mjs",

375 "release": "node scripts/release.mjs",

376 "preview": "node preview/scripts/kill-port.mjs && vite --config preview/vite.config.ts --port 6008 --strictPort",

377 "preview:build": "vite build --config preview/vite.config.ts && node scripts/gen-registry.mjs",

378 "gen:registry": "node scripts/gen-registry.mjs",

379 "check:registry": "node scripts/gen-registry.mjs --check",

380 "docs:sync-primitives": "node preview/scripts/sync-primitive-docs.mjs && prettier --write \"docs/primitives/**/*.tsx\"",

381 "audit": "node scripts/ui-audit.mjs",

382 "audit:examples": "node scripts/ui-audit.mjs docs",

383 "build": "tsup && tsc -p tsconfig.build.json && node scripts/copy-styles.mjs && node scripts/fix-esm-extensions.mjs && node scripts/add-use-client.mjs",

384 "dev": "node scripts/dev.mjs",

385 "prepublishOnly": "pnpm run build",

386 "check:audit-sync": "node scripts/check-audit-sync.mjs",

387 "check:contrast": "node scripts/check-contrast.mjs",

388 "visual-audit": "node scripts/visual-audit.mjs",

389 "check:visual-audit": "node scripts/visual-audit-smoke.mjs",

390 "check:frame-axe": "node scripts/check-frame-axe.mjs",

391 "check:frame-geometry": "node scripts/frame-geometry.mjs",

392 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L392

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L392

393 "init-agent": "node scripts/init-agent-kit.mjs",

394 "check:use-client": "node scripts/check-use-client.mjs"

395 },

396 "peerDependencies": {

397 "@axe-core/playwright": "*",

398 "@hookform/resolvers": "^5.2.0",

399 "@tanstack/react-query": ">=5.0.0",

400 "axe-core": "*",

401 "playwright": "*",

402 "react": ">=19.0.0",

403 "react-dom": ">=19.0.0",

404 "react-hook-form": "^7.76.0",

405 "react-router-dom": ">=7.0.0",

406 "recharts": "^2.13.0 || ^3.0.0",

407 "tailwindcss": ">=4.0.0",

408 "zod": "^4.4.0"

409 },

410 "peerDependenciesMeta": {

411 "recharts": {

412 "optional": true

docs/data-display/credential-reveal.tsxView file

Lines 96-136tsx

96 <CardTitle level={2}>Tone</CardTitle>

97 <CardDescription>

98 警告帯の severity は tone。warning（既定）は保管を促す通常の一度きり表示、destructive

99 は失効・再発行が必要な重大な扱い、info は運用上の補足に使います。

100 </CardDescription>

scripts/postinstall.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live

4 * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only

5 * adds a missing server entry) and guarded so it never runs in CI or in the library's own repo.

6 */

7import { ensureClaudeMd, ensureMcpJson, shouldSkip, writeWorkflowMd } from "./_agent-setup.mjs";

8

9const

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg