registry / @godxjp/ui / 31.10.3

@godxjp/ui@31.10.3

⚠ Under review

@godxjp/ui — shared React UI framework (shadcn + Radix + Tailwind v4).

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 86.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 564 file(s), 4.19 MB of source, external domains: billing.example.com, design-system.service.gov.uk, example.com, example.test, fonts.googleapis.com, godx.jp, i.pravatar.cc, status.example.co.jp, support.example.test, www.w3.org

Source & flagged code

6 flagged

package.jsonView file

Lines 381-421json

381 "check:token-tiers": "node scripts/check-token-tiers.mjs",

382 "check:token-width-wins": "node scripts/check-token-width-wins.mjs",

383 "check:typography": "node scripts/check-typography.mjs",

384 "check:use-client": "node scripts/check-use-client.mjs",

385 "check:visual-audit": "node scripts/visual-audit-smoke.mjs",

386 "check:voiceover-capture": "node scripts/check-voiceover-capture.mjs",

387 "dev": "node scripts/dev.mjs",

388 "docs:sync-primitives": "node preview/scripts/sync-primitive-docs.mjs && prettier --write \"docs/primitives/**/*.tsx\"",

389 "format": "prettier --check .",

390 "format:fix": "prettier --write .",

391 "gen:agent-catalog": "node scripts/gen-agent-catalog.mjs",

392 "gen:component-api-manifest": "node scripts/gen-component-api-manifest.mjs",

393 "gen:component-tokens": "node scripts/gen-component-tokens.mjs",

394 "gen:email-tokens": "node scripts/gen-email-tokens.mjs",

395 "gen:frame-coverage-ledger": "node scripts/gen-frame-coverage-ledger.mjs",

396 "gen:registry": "node scripts/gen-registry.mjs",

397 "gen:style-layers": "node scripts/gen-style-layers.mjs",

398 "init-agent": "node scripts/init-agent-kit.mjs",

399 "lint": "eslint . --cache --cache-strategy content",

400 "lint:fix": "eslint . --fix",

401 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L401

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L401

402 "prepublishOnly": "pnpm run build",

403 "preview": "PORT=$(node preview/scripts/preview-port.mjs) && node preview/scripts/kill-port.mjs $PORT && echo \"preview: http://localhost:$PORT\" && vite --config preview/vite.config.ts --port $PORT --strictPort",

404 "preview:build": "vite build --config preview/vite.config.ts && node scripts/gen-registry.mjs && node scripts/copy-agent-catalog.mjs",

405 "regen": "node scripts/regen-generated.mjs",

406 "release": "node scripts/release.mjs",

407 "ship:surface": "pnpm regen && pnpm verify:ci:static && pnpm check:frame-contracts",

408 "test": "vitest run",

409 "test:coverage": "vitest run --coverage",

410 "test:manual": "vitest run --config vitest.manual.config.ts",

411 "test:visual:auth-login": "node scripts/auth-shell-login-visual.mjs",

412 "test:visual:auth-registration": "node scripts/auth-shell-registration-visual.mjs",

413 "test:visual:chart-cjk-axis": "node scripts/chart-cjk-axis-visual.mjs",

414 "test:visual:kanban-select": "node scripts/kanban-select-visual.mjs",

415 "test:visual:table-collection-cjk": "node scripts/table-collection-cjk-visual.mjs",

416 "test:visual:topbar-collision": "node scripts/topbar-collision-visual.mjs",

417 "test:watch": "vitest",

418 "typecheck": "node node_modules/typescript-7/bin/tsc --noEmit -p tsconfig.json",

419 "typecheck:docs": "node node_modules/typescript-7/bin/tsc --noEmit -p tsconfig.docs.json",

420 "typecheck:mcp": "node node_modules/typescript-7/bin/tsc --noEmit -p mcp/tsconfig.json",

421 "typecheck:ts6": "tsc --noEmit -p tsconfig.json",

docs/data-display/credential-reveal.tsxView file

Lines 99-139tsx

99 <CardTitle level={2}>Tone</CardTitle>

100 <CardDescription>

101 警告帯の severity は tone。warning（既定）は保管を促す通常の一度きり表示、destructive

102 は失効・再発行が必要な重大な扱い、info は運用上の補足に使います。

103 </CardDescription>

104 </CardHeader>

105 <CardContent>

106 <Flex direction="col" gap="md">

107 <CredentialReveal

108 label="サービスアカウント鍵"

109 secret="svc_3pS5yJ8Fh2kQ9wR7nZ1xV4bT"

110 tone="warning"

111 />

112 <CredentialReveal

113 label="デバイス資格情報"

114 secret="dev_7h2K9wR7nZ1xV4bT6mL0cD"

115 tone="destructive"

116 />

117 <CredentialReveal

118 label="Webhook 署名シークレット"

119 secret="whsec_1xV4bT6mL0cD3pS5yJ8Fh2kQ"

High

High Secret

Package contains a high-severity secret pattern.

docs/data-display/credential-reveal.tsxView on unpkg · L119

High

Secret Pattern

Stripe webhook signing secret in docs/data-display/credential-reveal.tsx

docs/data-display/credential-reveal.tsxView on unpkg · L119

120 tone="info"

121 warning="このシークレットは Webhook 署名の検証にのみ使用します。"

122 />

123 </Flex>

124 </CardContent>

125 </Card>

126

127 <Card>

128 <CardHeader>

129 <CardTitle level={2}>Size</CardTitle>

130 <CardDescription>

131 size は資格情報行の高さと操作ボタンの寸法を決めます。xs / sm

132 は明細行や設定表の中に、md （既定）は単独のカードに、lg

133 は発行直後のダイアログで使います。

134 </CardDescription>

135 </CardHeader>

136 <CardContent>

137 <Flex direction="col" gap="md">

138 <CredentialReveal label="xs" secret="key_xs_9wR7nZ1xV4bT6mL0cD" size="xs" />

139 <CredentialReveal label="sm" secret="key_sm_9wR7nZ1xV4bT6mL0cD" size="sm" />

scripts/postinstall.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2/**

3 * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live

4 * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only

5 * adds a missing server entry) and guarded so it never runs in CI or in the library's own repo.

6 */

7import {

8 ensureClaudeMd,

9 ensureMcpJson,

10 ensureConsumerRules,

11 outOfProjectUiMcpReport,

12 refreshGuineaPigSkill,

13 shouldSkip,

14 writeWorkflowMd,

15} from "./_agent-setup.mjs";

17const root = process.env.INIT_CWD || process.cwd();

19const skip = shouldSkip(root);

20if (skip) process.exit(0); // silent: CI / opt-out / self-install / no consumer project

22try {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L2

dist/styles/core-with-fallbacks.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/styles/core-with-fallbacks.cssView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

docs/data-display/credential-reveal.tsxView file

119patternName = stripe_webhook_secret severity = high line = 119

High

High Secret

Package contains a high-severity secret pattern.

docs/data-display/credential-reveal.tsxView on unpkg · L119

119patternName = stripe_webhook_secret severity = high line = 119

High

Secret Pattern

Stripe webhook signing secret in docs/data-display/credential-reveal.tsx

docs/data-display/credential-reveal.tsxView on unpkg · L119

scripts/postinstall.mjsView file

2Install-time code directly mutates a foreign AI-agent control surface: L2: /** L3: * Auto-registers the godx-ui MCP server in the consumer's `.mcp.json` so the agent gets live L4: * access to the component catalog + audit rules WITHOUT any manual step. Non-destructive (only ... L24: // A refusal is a full sentence, not one of the three status words — say it on its own line L25: // rather than folding it into "MCP in .mcp.json (…)", where it would read as a success. L26: if (r.startsWith("left untouched") || r.startsWith("present (custom godx-ui")) { L27: console.log(`\n @godxjp/ui → .mcp.json ${r}\n`); L28: } ... L32: if (outside) console.log(outside); L33: // The mandate is plain text the agent reads every turn (CLAUDE.md block + workflow file). It L34: // changes nothing in the dev loop

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.mjsView on unpkg · L2

dist/styles/core-with-fallbacks.cssView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/styles/core-with-fallbacks.cssView on unpkg

Findings

1 Critical4 High4 Medium5 Low

CriticalAi Agent Control Hijackscripts/postinstall.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighHigh Secretdocs/data-display/credential-reveal.tsx

HighSemantic Analysis Limiteddist/styles/core-with-fallbacks.css

HighSecret Patterndocs/data-display/credential-reveal.tsx

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @godxjp/ui@31.10.3.

See version security history for other recorded verdicts.

Review the evidence and your use of @godxjp/ui@31.10.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-29 20:29:31.201Z (UTC).