Loading npm security reports…

@guandata/guanetl@0.1.38: AI-agent control-surface risk | LPM Firewall

registry / @guandata/guanetl / 0.1.38

@guandata/guanetl@0.1.38

观远 ETL 本地开发工具 - 拉取、编辑、导出、预览、保存 ETL

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Global npm installation automatically changes foreign AI-assistant skill directories. Installation subprocesses also strip a WorkBuddy safe-delete preload.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Global npm installation outside CI with GUAN_SKIP_INSTALL_SKILL unset or different from 1.

Impact

AI assistants receive package-authored instructions without separate setup consent, while installation runs without the targeted deletion safeguard.

Mechanism

The postinstall hook invokes a globally targeted, automatically confirmed skill installer, then copies package skill files into CodeBuddy and WorkBuddy directories; child environments remove the safe-delete preload.

Policy narrative

A global installation launches install-skill automatically. That command invokes the skills installer with global and automatic-confirmation flags, then copies its skill into foreign assistant configuration directories. The installation environment explicitly strips WorkBuddy's safe-delete preload. The global-only gate and opt-out reduce exposure but do not provide affirmative consent or preserve the safeguard.

AI rationale

The inspected lifecycle chain performs unconsented changes to foreign AI-agent control surfaces and explicitly disables a safety preload. These concrete behaviors exceed guarded package-owned extension setup and warrant blocking under the supplied policy. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.

Evidence

package.jsonbin/postinstall.jsbin/run.jsbin/install-env.js.codebuddy.workbuddy

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

9"postinstall": "node bin/postinstall.js", "build": "node scri

High

Suspicious Lifecycle Evidence

package.json activates bin/postinstall.js automatically after installation.

package.jsonView on unpkg · L9

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/run.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @guandata/guanetl@0.1.31 matchedIdentity = npm:QGd1YW5kYXRhL2d1YW5ldGw:0.1.31 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/run.jsView on unpkg

163const args = [ // --yes: postinstall 等非交互环境下 npx 需要免确认下载 skills CLI "--yes", "skills", "add", pkgRoot, "--skill", "guanetl", "-g", "-y", ...extraArgs, ]; console.log("Installing guanetl to AI coding assist

High

Ai Review Evidence

bin/run.js invokes skills add with automatic confirmation and global installation flags.

bin/run.jsView on unpkg · L163

bin/postinstall.jsView file

23function skipReason() { if (process.env.GUAN_SKIP_INSTALL_SKILL === "1") return "GUAN_SKIP_INSTALL_SKILL=1"; if (process.env.npm[redacted] !== "true") return "not a global install"; if (process.env.CI) return "CI environment"; return ""; } function main() {

High

Ai Review Evidence

The hook runs during global installs unless CI or GUAN_SKIP_INSTALL_SKILL disables it, invoking install-skill without affirmative consent.

bin/postinstall.jsView on unpkg · L23

37const result = spawnSync( process.execPath, [path.join(__dirname, "run.js"), "install-skill"], { stdio: "inherit", env: process.env, timeout: 180000 } ); if (result.error || result.status

High

Ai Review Evidence

The hook runs during global installs unless CI or GUAN_SKIP_INSTALL_SKILL disables it, invoking install-skill without affirmative consent.

bin/postinstall.jsView on unpkg · L37

Source & flagged code

7 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@guandata/guanetl",

3 "version": "0.1.38",

4 "description": "观远 ETL 本地开发工具 - 拉取、编辑、导出、预览、保存 ETL",

5 "bin": {

6 "guanetl": "bin/run.js"

7 },

8 "scripts": {

9 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "build": "node scripts/build.js && node scripts/sync-skill.js",

High

Suspicious Lifecycle Evidence

package.json activates bin/postinstall.js automatically after installation.

package.jsonView on unpkg · L9

11 "pack:all": "node scripts/pack-all.js",

12 "test:build-script": "node scripts/platform-tests.js build && node scripts/platform-tests.js run",

13 "test:package-layout": "node scripts/platform-tests.js layout && node scripts/platform-tests.js install-smoke",

14 "test:auto-select": "node scripts/platform-tests.js auto-select",

15 "verify:platforms": "node scripts/verify-platforms.js",

16 "changelog": "node ../../scripts/generate-release-changelog.js .",

17 "check-changelog": "node ../../scripts/check-release-changelog.js .",

18 "prepublishOnly": "npm run test:build-script && npm run check-changelog && npm run build && node scripts/preflight.js && npm run test:package-layout && npm run test:auto-select"

19 },

20 "files": [

21 "bin/",

22 "skills/",

23 "CHANGELOG.md",

24 "LICENSE",

25 "LICENSE.zh-CN",

26 "README.md"

27 ],

28 "keywords": [

29 "guandata",

bin/run.jsView file

Lines 143-183javascript

143 if (process.env.npm_execpath) {

144 candidates.push(path.join(path.dirname(process.env.npm_execpath), "npx-cli.js"));

145 }

146 candidates.push(path.join(executableDir, "node_modules", "npm", "bin",

bin/postinstall.jsView file

Lines 3-57javascript

3/**

4 * Best-effort post-install hook: refresh the installed AI skill right after

5 * a global npm install/upgrade, so users cannot forget to run

6 * `guanetl install-skill` and end up with a stale SKILL.md.

7 *

8 * Constraints:

9 * - MUST never fail the npm install: every failure path still exits 0.

10 * - Only runs for global installs (`npm install -g` / `npm link`); a local

11 * `npm install` inside a project never touches the user's home dirs.

12 * - Escape hatch: GUAN_SKIP_INSTALL_SKILL=1 skips entirely (e.g. CI images