Loading npm security reports…

@gotlibr/aisdlc@2.0.1: AI-agent control-surface risk | LPM Firewall

registry / @gotlibr/aisdlc / 2.0.1

@gotlibr/aisdlc@2.0.1

Generic workflow builder and offline execution engine

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically finds the consumer Git repository, writes an AISDLC skill, and links it into Claude Code's skill directory. This is an unconsented postinstall modification of an external AI-agent control surface.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation from within a Git-backed consumer project.

Impact

The package causes Claude Code to load package-provided instructions in the consumer project.

Mechanism

Postinstall writes .agents content and creates a .claude skill symlink.

Policy narrative

On npm installation, the postinstall script uses INIT_CWD to find the consumer repository. It invokes installConsumerAgentSkill, which selects the Claude Code provider. That provider writes a packaged skill under .agents/skills/aisdlc and creates .claude/skills/aisdlc pointing to it. The mutation is automatic and does not require the consumer to run the advertised provider-install command.

Rationale

The automatic postinstall hook modifies the consuming repository's Claude Code instruction surface. This meets the policy threshold for malicious install-hook abuse even though no network exfiltration was found.

Evidence

package.jsonscripts/postinstall.mjsdist/src/composition/root.jsdist/src/integration/gates.js.agents/skills/aisdlc/SKILL.md.agents/skills/aisdlc/.aisdlc-managed.json.claude/skills/aisdlc

Decision evidence

Source & flagged code

6 flagged

package.jsonView file

Lines 31-71json

31 "native",

32 "scripts",

33 "schemas",

34 "presets",

35 "skills"

36 ],

37 "scripts": {

38 "build": "node scripts/build.mjs",

39 "release:pack": "node scripts/release.mjs",

40 "build:native": "node scripts/build-native.mjs",

41 "verify:native": "node scripts/build-native.mjs --verify",

42 "verify:native:matrix": "node scripts/verify-native-matrix.mjs",

43 "typecheck": "tsc -p tsconfig.json --noEmit",

44 "test": "node scripts/test-phases.mjs",

45 "test:foundation": "vitest run test/foundation",

46 "test:architecture": "vitest run test/foundation/architecture.test.ts test/architecture",

47 "test:conformance": "vitest run test/conformance",

48 "test:native": "node --expose-gc node_modules/vitest/vitest.mjs run test/native",

49 "test:cold-start": "node test/package/cold-start.mjs",

50 "architecture:verify": "pnpm build && node dist/tools/trace/architecture.js",

51 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L51

52 "prepack": "node scripts/package-runtime.mjs --verify && node scripts/build-native.mjs --verify --quiet",

53 "prepublishOnly": "pnpm build && node scripts/verify-native-matrix.mjs"

54 },

55 "aisdlcRuntimeDependencies": {

56 "ajv": "8.17.1",

57 "fast-deep-equal": "3.1.3",

58 "fast-uri": "3.1.5",

59 "json-schema-traverse": "1.0.0",

60 "remark-parse": "11.0.0",

61 "require-from-string": "2.0.2",

62 "typescript": "5.7.2",

63 "unified": "11.0.5"

64 },

65 "dependencies": {},

66 "devDependencies": {

67 "@types/node": "22.10.2",

68 "ajv": "8.17.1",

69 "fast-deep-equal": "3.1.3",

70 "fast-uri": "3.1.5",

71 "json-schema-traverse": "1.0.0",

native/prebuild-contract.cjsView file

Lines 1-22javascript

1'use strict';

2

3const { createHash } = require('node:crypto');

4const { existsSync, readFileSync } = require('node:fs');

native/prebuilds/linux-x64-napi9/aisdlc_native.nodeView file

•path = native/prebuilds/linux-x64-napi9/aisdlc_native.node kind = native_binary sizeBytes = 98184 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/prebuilds/linux-x64-napi9/aisdlc_native.nodeView on unpkg

dist/node_modules/typescript/lib/typescript.jsView file

•path = dist/node_modules/typescript/lib/typescript.js kind = oversized_source_file sizeBytes = 9043048 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/node_modules/typescript/lib/typescript.jsView on unpkg

dist/node_modules/ajv/dist/refs/data.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/node_modules/ajv/dist/refs/data.jsonView on unpkg