Loading npm security reports…

@guandata/guanetl@0.1.37: AI-agent control-surface risk | LPM Firewall

registry / @guandata/guanetl / 0.1.37

@guandata/guanetl@0.1.37

观远 ETL 本地开发工具 - 拉取、编辑、导出、预览、保存 ETL

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Global installation automatically changes foreign AI-assistant skill directories. Installation also removes a WorkBuddy safety preload from its child environment.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A global npm installation outside CI without GUAN_SKIP_INSTALL_SKILL=1.

Impact

AI assistants receive package-controlled instructions without explicit setup consent, while installation proceeds without the targeted safety preload.

Mechanism

The postinstall hook launches install-skill, runs a globally targeted skills installer with automatic confirmation, and copies the skill into CodeBuddy and WorkBuddy directories. The installation environment strips the safe-delete preload.

Policy narrative

Installing the package globally activates its postinstall hook. The hook runs the skill installer without requesting confirmation, then copies the package's skill into foreign AI-assistant directories. The same installation path removes WorkBuddy's safe-delete preload and can restart itself with the altered environment. Global-install and CI guards limit activation but do not establish consent to change assistant instructions.

AI rationale

Source establishes automatic, unconsented install-time mutation of foreign AI-agent control surfaces, accompanied by targeted safety-preload removal. This meets the blocking policy despite the skill's package-related purpose and skip guards.

Evidence

package.jsonbin/postinstall.jsbin/run.jsbin/install-env.js.codebuddy.workbuddy

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8"scripts": { "postinstall": "node bin/postinstall.js", "build": "node scripts/build.j

High

Suspicious Lifecycle Evidence

package.json automatically runs bin/postinstall.js after installation.

package.jsonView on unpkg · L8

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/run.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @guandata/guanetl@0.1.31 matchedIdentity = npm:QGd1YW5kYXRhL2d1YW5ldGw:0.1.31 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/run.jsView on unpkg

163const args = [ // --yes: postinstall 等非交互环境下 npx 需要免确认下载 skills CLI "--yes", "skills", "add", pkgRoot, "--skill", "guanetl", "-g", "-y", ...extraArgs, ]; console.log("Installing guanetl to AI coding assista

High

Ai Review Evidence

The launcher invokes the skills installer with automatic confirmation and global installation arguments.

bin/run.jsView on unpkg · L163

bin/postinstall.jsView file

23function skipReason() { if (process.env.GUAN_SKIP_INSTALL_SKILL === "1") return "GUAN_SKIP_INSTALL_SKILL=1"; if (process.env.npm[redacted] !== "true") return "not a global install"; if (process.env.CI) return "CI environment"; return ""; } function main() { const r

High

Suspicious Lifecycle Evidence

The postinstall hook invokes install-skill on global installs unless an escape hatch or CI flag skips it; there is no opt-in requirement.

bin/postinstall.jsView on unpkg · L23

37const result = spawnSync( process.execPath, [path.join(__dirname, "run.js"), "install-skill"], { stdio: "inherit", env: process.env, timeout: 180000 } ); if (result.error || result.s

High

Suspicious Lifecycle Evidence

The postinstall hook invokes install-skill on global installs unless an escape hatch or CI flag skips it; there is no opt-in requirement.

bin/postinstall.jsView on unpkg · L37

Source & flagged code

7 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@guandata/guanetl",

3 "version": "0.1.37",

4 "description": "观远 ETL 本地开发工具 - 拉取、编辑、导出、预览、保存 ETL",

5 "bin": {

6 "guanetl": "bin/run.js"

7 },

8 "scripts": {

9 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "build": "node scripts/build.js && node scripts/sync-skill.js",

High

Suspicious Lifecycle Evidence

package.json automatically runs bin/postinstall.js after installation.

package.jsonView on unpkg · L8

11 "pack:all": "node scripts/pack-all.js",

12 "test:build-script": "node scripts/platform-tests.js build && node scripts/platform-tests.js run",

13 "test:package-layout": "node scripts/platform-tests.js layout && node scripts/platform-tests.js install-smoke",

14 "test:auto-select": "node scripts/platform-tests.js auto-select",

15 "verify:platforms": "node scripts/verify-platforms.js",

16 "changelog": "node ../../scripts/generate-release-changelog.js .",

17 "check-changelog": "node ../../scripts/check-release-changelog.js .",

18 "prepublishOnly": "npm run test:build-script && npm run check-changelog && npm run build && node scripts/preflight.js && npm run test:package-layout && npm run test:auto-select"

19 },

20 "files": [

21 "bin/",

22 "skills/",

23 "CHANGELOG.md",

24 "LICENSE",

25 "LICENSE.zh-CN",

26 "README.md"

27 ],

28 "keywords": [

29 "guandata",

bin/run.jsView file

Lines 143-183javascript

143 if (process.env.npm_execpath) {

144 candidates.push(path.join(path.dirname(process.env.npm_execpath), "npx-cli.js"));

145 }

146 candidates.push(path.join(executableDir, "node_modules", "npm", "bin",

bin/postinstall.jsView file

Lines 3-57javascript

3/**

4 * Best-effort post-install hook: refresh the installed AI skill right after

5 * a global npm install/upgrade, so users cannot forget to run

6 * `guanetl install-skill` and end up with a stale SKILL.md.

7 *

8 * Constraints:

9 * - MUST never fail the npm install: every failure path still exits 0.

10 * - Only runs for global installs (`npm install -g` / `npm link`); a local

11 * `npm install` inside a project never touches the user's home dirs.

12 * - Escape hatch: GUAN_SKIP_INSTALL_SKILL=1 skips entirely (e.g. CI images