Loading npm security reports…

@godxjp/ui@23.4.3: AI-agent control-surface risk | LPM Firewall

registry / @godxjp/ui / 23.4.3

@godxjp/ui@23.4.3

@godxjp/ui — shared React UI framework (shadcn + Radix + Tailwind v4).

AI Security Review

scanned 27d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically modifies consumer AI-agent configuration and instruction files. This establishes a package-controlled MCP channel and persistent guidance in the consumer project.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs postinstall.

Impact

A dependency changes a consumer's AI-agent control surface and can influence future agent sessions without explicit setup.

Mechanism

Automatic writes to MCP, agent-instruction, and AI-rule configuration files.

Policy narrative

The postinstall hook runs in the consumer project. It registers a godx-ui MCP server, appends or refreshes CLAUDE.md guidance, writes a workflow file, and creates AI rules based on detected source directories. These writes occur automatically rather than through the explicit init-agent command. The installed configuration persists beyond installation and changes how AI agents discover tools and receive instructions.

AI rationale

This is unconsented postinstall mutation of a broad, foreign AI-agent control surface. No data theft was confirmed, but the automatic persistent agent-control changes meet the publish-block policy.

Evidence

package.jsonscripts/postinstall.mjsscripts/_agent-setup.mjs.mcp.jsonCLAUDE.md.claude/godxjp-ui-workflow.md.ai/rules/godxjp-ui.md.ai/rules/index.md.prettierignore

Decision evidence

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/data-display/credential-reveal.tsxView file

116patternName = stripe_webhook_secret severity = high line = 116

High

High Secret

Package contains a high-severity secret pattern.

docs/data-display/credential-reveal.tsxView on unpkg · L116

116patternName = stripe_webhook_secret severity = high line = 116

High

Secret Pattern

Stripe webhook signing secret in docs/data-display/credential-reveal.tsx

docs/data-display/credential-reveal.tsxView on unpkg · L116

scripts/postinstall.mjsView file

2Install-time code directly mutates a foreign AI-agent control surface: L2: /** L3: * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live L4: * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only ... L23: // A refusal is a full sentence, not one of the three status words — say it on its own line L24: // rather than folding it into "MCP in .mcp.json (…)", where it would read as a success. L25: if (r.startsWith("left untouched") || r.startsWith("present (custom godx-ui")) { L26: console.log(`\n @godxjp/ui → .mcp.json ${r}\n`); L27: } L28: // The mandate is plain text the agent reads every turn (CLAUDE.md block + workflow file). It L29: // changes nothing in the dev loop, so it is installed by default: an agent th

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L2

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 373-413json

373 "check:no-consumer-coupling": "node scripts/check-no-consumer-coupling.mjs",

374 "release": "node scripts/release.mjs",

375 "preview": "node preview/scripts/kill-port.mjs && vite --config preview/vite.config.ts --port 6008 --strictPort",

376 "preview:build": "vite build --config preview/vite.config.ts && node scripts/gen-registry.mjs",

377 "gen:registry": "node scripts/gen-registry.mjs",

378 "check:registry": "node scripts/gen-registry.mjs --check",

379 "docs:sync-primitives": "node preview/scripts/sync-primitive-docs.mjs && prettier --write \"docs/primitives/**/*.tsx\"",

380 "audit": "node scripts/ui-audit.mjs",

381 "audit:examples": "node scripts/ui-audit.mjs docs",

382 "build": "tsup && tsc -p tsconfig.build.json && node scripts/copy-styles.mjs && node scripts/fix-esm-extensions.mjs && node scripts/add-use-client.mjs",

383 "dev": "node scripts/dev.mjs",

384 "prepublishOnly": "pnpm run build",

385 "check:audit-sync": "node scripts/check-audit-sync.mjs",

386 "check:gate-coverage": "node scripts/check-gate-coverage.mjs",

387 "check:contrast": "node scripts/check-contrast.mjs",

388 "check:text-ink-clip": "node scripts/check-text-ink-clip.mjs",

389 "check:font-fallback-metrics": "node scripts/check-font-fallback-metrics.mjs",

390 "visual-audit": "node scripts/visual-audit.mjs",

391 "check:visual-audit": "node scripts/visual-audit-smoke.mjs",

392 "check:frame-geometry": "node scripts/frame-geometry.mjs",

393 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L393

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L393

394 "init-agent": "node scripts/init-agent-kit.mjs",

395 "check:use-client": "node scripts/check-use-client.mjs",

396 "check:catalog-snippets": "node scripts/audit-catalog-snippets.mjs",

397 "check:data-entry-frame-runtime": "node scripts/check-data-entry-frame-runtime.mjs",

398 "check:data-table-empty-inset": "node scripts/check-data-table-empty-inset.mjs",

399 "check:number-input-step-target": "node scripts/check-number-input-step-target.mjs",

400 "check:mcp-token-sync": "node scripts/gen-component-tokens.mjs --check",

401 "check:email-token-sync": "node scripts/gen-email-tokens.mjs --check",

402 "check:focus-ring-paint": "node scripts/check-focus-ring-paint.mjs",

403 "typecheck:mcp": "node node_modules/typescript-7/bin/tsc --noEmit -p mcp/tsconfig.json"

404 },

405 "peerDependencies": {

406 "@hookform/resolvers": "^5.2.0",

407 "@tanstack/react-query": ">=5.0.0",

408 "playwright": "*",

409 "react": ">=19.0.0",

410 "react-dom": ">=19.0.0",

411 "react-hook-form": "^7.76.0",

412 "react-router-dom": ">=7.0.0",

413 "recharts": "^2.13.0 || ^3.0.0",

docs/data-display/credential-reveal.tsxView file

Lines 96-136tsx

96 <CardTitle level={2}>Tone</CardTitle>

97 <CardDescription>

98 警告帯の severity は tone。warning（既定）は保管を促す通常の一度きり表示、destructive

99 は失効・再発行が必要な重大な扱い、info は運用上の補足に使います。

100 </CardDescription>

scripts/postinstall.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live

4 * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only

5 * adds a missing server entry) and guarded so it never runs in CI or in the library's own repo.

6 */

7import {

8 ensureClaudeMd,

9 ensureMcpJson,

10 ensureConsumerRules,

dist/i18n/messages/en.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/i18n/messages/en.jsonView on unpkg