@goobit/ai@1.1.0
Enterprise AI Git Collaboration Governance & Smart Skill Hub for Heterogeneous AI Agents
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest and source establish an automatic postinstall path that writes behavior-bearing configuration for multiple consumer AI agents and adds bundled skills without an affirmative consent gate. This meets the policy for blocking unconsented install-time AI-agent control-surface mutation, even though the behavior aligns with the package’s stated governance product.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package into an external project with INIT_CWD set.
Impact
Installation changes behavior-bearing instructions and capabilities available to AI tools in the consumer project without an affirmative setup choice.
Mechanism
postinstall invokes setupGovernance, which writes AGENTS.md and instruction files for Claude, Cursor, Gemini, and Copilot, and seeds bundled skills into .agents/skills.
Policy narrative
The package’s postinstall hook automatically invokes project setup for an external install target. That setup writes instructions directing several AI tools to follow the package-generated AGENTS.md and autonomously load bundled skills, and installs those skills into the project. This is unconsented install-time mutation of a broad AI-agent control surface. The inspected excerpts do not establish network communication or credential transfer.
AI rationale
The manifest and source establish an automatic postinstall path that writes behavior-bearing configuration for multiple consumer AI agents and adds bundled skills without an affirmative consent gate. This meets the policy for blocking unconsented install-time AI-agent control-surface mutation, even though the behavior aligns with the package’s stated governance product.
Evidence
package.jsonbin/postinstall.jsbin/harness-bridge.jsAGENTS.mdCLAUDE.md.cursorrules.gemini/rules/project.md.github/copilot-instructions.md.agents/skills/
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.
Evidence for policy risk
- The manifest runs bin/postinstall.js during installation.
- The postinstall hook calls setupGovernance for an external project without an affirmative setup prompt.
- setupGovernance writes AGENTS.md and agent-specific instruction files into the consumer project.
- Those generated instructions tell AI coding tools to follow the package-generated constitution and autonomously load bundled skills.
- The setup also seeds bundled skills into the consumer project’s .agents/skills directory.
- The launcher describes bridging AI harnesses and synchronizing skills, confirming the relevant integration context.
Evidence against
- The behavior installs governance and skill assets consistent with the package’s stated product function; the inspected excerpts show no network endpoint or credential transfer.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkg•scripts.postinstall = node ./bin/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/harness-bridge.jsView file
Findings
1 Critical3 High4 Medium4 Low
CriticalAi Agent Control Hijackbin/harness-bridge.js
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/harness-bridge.js
HighSemantic Analysis Limitedpackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperassets/skills/excel-reader/scripts/read_excel.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptobin/harness-bridge.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @goobit/ai@1.1.0.
See all versions of @goobit/ai for other recorded verdicts.
- Avoid installing @goobit/ai@1.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.