@godxjp/ui@20.0.0: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@godxjp/ui@20.0.0: AI-agent control-surface risk | LPM Firewall

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/data-display/credential-reveal.tsxView file

116patternName = stripe_webhook_secret severity = high line = 116

High

High Secret

Package contains a high-severity secret pattern.

docs/data-display/credential-reveal.tsxView on unpkg · L116

116patternName = stripe_webhook_secret severity = high line = 116

High

Secret Pattern

Stripe webhook signing secret in docs/data-display/credential-reveal.tsx

docs/data-display/credential-reveal.tsxView on unpkg · L116

scripts/postinstall.mjsView file

2Install-time code directly mutates a foreign AI-agent control surface: L2: /** L3: * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live L4: * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only ... L22: const r = ensureMcpJson(root); L23: // The mandate is plain text the agent reads every turn (CLAUDE.md block + workflow file). It L24: // changes nothing in the dev loop, so it is installed by default: an agent that never saw the ... L31: console.log( L32: `\n @godxjp/ui → MCP in .mcp.json (${r}); workflow mandate in CLAUDE.md (${md}).\n` + L33: (rules ? ` common consumer rules in .ai/rules/godxjp-ui.md (glob ${rules}/**).\n` : "") + Write operation from scripts/_agent-setup.mjs: L7: import { createHash } fro

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L2

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 374-414json

374 "check:core-isolation": "node scripts/check-core-isolation.mjs",

375 "check:no-consumer-coupling": "node scripts/check-no-consumer-coupling.mjs",

376 "release": "node scripts/release.mjs",

377 "preview": "node preview/scripts/kill-port.mjs && vite --config preview/vite.config.ts --port 6008 --strictPort",

378 "preview:build": "vite build --config preview/vite.config.ts && node scripts/gen-registry.mjs",

379 "gen:registry": "node scripts/gen-registry.mjs",

380 "check:registry": "node scripts/gen-registry.mjs --check",

381 "docs:sync-primitives": "node preview/scripts/sync-primitive-docs.mjs && prettier --write \"docs/primitives/**/*.tsx\"",

382 "audit": "node scripts/ui-audit.mjs",

383 "audit:examples": "node scripts/ui-audit.mjs docs",

384 "build": "tsup && tsc -p tsconfig.build.json && node scripts/copy-styles.mjs && node scripts/fix-esm-extensions.mjs && node scripts/add-use-client.mjs",

385 "dev": "node scripts/dev.mjs",

386 "prepublishOnly": "pnpm run build",

387 "check:audit-sync": "node scripts/check-audit-sync.mjs",

388 "check:gate-coverage": "node scripts/check-gate-coverage.mjs",

389 "check:contrast": "node scripts/check-contrast.mjs",

390 "visual-audit": "node scripts/visual-audit.mjs",

391 "check:visual-audit": "node scripts/visual-audit-smoke.mjs",

392 "check:frame-axe": "node scripts/check-frame-axe.mjs",

393 "check:frame-geometry": "node scripts/frame-geometry.mjs",

394 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L394

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L394

395 "init-agent": "node scripts/init-agent-kit.mjs",

396 "check:use-client": "node scripts/check-use-client.mjs"

397 },

398 "peerDependencies": {

399 "@axe-core/playwright": "*",

400 "@hookform/resolvers": "^5.2.0",

401 "@tanstack/react-query": ">=5.0.0",

402 "axe-core": "*",

403 "playwright": "*",

404 "react": ">=19.0.0",

405 "react-dom": ">=19.0.0",

406 "react-hook-form": "^7.76.0",

407 "react-router-dom": ">=7.0.0",

408 "recharts": "^2.13.0 || ^3.0.0",

409 "tailwindcss": ">=4.0.0",

410 "zod": "^4.4.0"

411 },

412 "peerDependenciesMeta": {

413 "recharts": {

414 "optional": true

docs/data-display/credential-reveal.tsxView file

Lines 96-136tsx

96 <CardTitle level={2}>Tone</CardTitle>

97 <CardDescription>

98 警告帯の severity は tone。warning（既定）は保管を促す通常の一度きり表示、destructive

99 は失効・再発行が必要な重大な扱い、info は運用上の補足に使います。

100 </CardDescription>

scripts/postinstall.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live

4 * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only

5 * adds a missing server entry) and guarded so it never runs in CI or in the library's own repo.

6 */

7import {

8 ensureClaudeMd,

9 ensureMcpJson,

10 ensureConsumerRules,

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg