Loading npm security reports…

@guandata/guanwf: AI-agent control-surface risk | LPM Firewall

registry / @guandata/guanwf / 0.1.836

@guandata/guanwf@0.1.836

观远工作流数据流编辑工具 - 创建、编辑、导出、预览、保存数据流

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Global npm installation automatically installs agent instructions into foreign AI-assistant configuration directories. The installer also removes a WorkBuddy safe-delete preload before executing.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Global npm installation outside CI without GUAN_SKIP_INSTALL_SKILL=1.

Impact

Changes instructions available to foreign AI assistants without a separate setup request and bypasses the inherited safe-delete preload during installation.

Mechanism

The postinstall hook launches install-skill, runs an automatically confirmed global skills installer, copies skill files into buddy configuration directories, and strips the safe-delete preload from the child environment.

Policy narrative

A global installation activates postinstall, which invokes the launcher’s skill setup command. That command runs npx with automatic confirmation and global installation arguments, then copies the packaged workflow skill into CodeBuddy and WorkBuddy directories. When a WorkBuddy safe-delete preload is present, the setup path removes it and restarts itself. The skip conditions limit activation but do not require affirmative consent to modify foreign agent instructions.

AI rationale

The inspected chain automatically modifies foreign AI-agent control surfaces during postinstall and removes an inherited safety preload. Those concrete behaviors exceed guarded package-owned extension setup and meet the blocking policy.

Evidence

package.jsonbin/postinstall.jsbin/run.jsbin/install-env.js.codebuddy.workbuddyskills/guanwf

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

9"postinstall": "node bin/postinstall.js", "build": "node scri

High

Suspicious Lifecycle Evidence

package.json automatically runs bin/postinstall.js after installation.

package.jsonView on unpkg · L9

•scripts.postinstall = node bin/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/run.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @guandata/guanwf@0.1.830 matchedIdentity = npm:QGd1YW5kYXRhL2d1YW53Zg:0.1.830 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/run.jsView on unpkg

165"--yes", "skills", "add", pkgRoot, "--skill", "guanwf", "-g", "-y", ...extraArgs, ]; console.log("Installing guanwf to AI coding assistants...

High

Ai Review Evidence

bin/run.js invokes npx with automatic confirmation to install guanwf globally into AI assistants.

bin/run.jsView on unpkg · L165

bin/postinstall.jsView file

23function skipReason() { if (process.env.GUAN_SKIP_INSTALL_SKILL === "1") return "GUAN_SKIP_INSTALL_SKILL=1"; if (process.env.npm[redacted] !== "true") return "not a global install"; if (process.env.CI) return "CI environment"; re

High

Ai Review Evidence

The hook invokes install-skill for global installs unless explicitly skipped or running in CI.

bin/postinstall.jsView on unpkg · L23

37const result = spawnSync( process.execPath, [path.join(__dirname, "run.js"), "install-skill"], { stdio: "inherit", env: process.env, timeout: 180000 } ); if

High

Ai Review Evidence

The hook invokes install-skill for global installs unless explicitly skipped or running in CI.

bin/postinstall.jsView on unpkg · L37

Source & flagged code

7 flagged

package.jsonView file

Lines 1-29json

1{

2 "name": "@guandata/guanwf",

3 "version": "0.1.836",

4 "description": "观远工作流数据流编辑工具 - 创建、编辑、导出、预览、保存数据流",

5 "bin": {

6 "guanwf": "bin/run.js"

7 },

8 "scripts": {

9 "postinstall": "node bin/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L9

10 "build": "node scripts/build.js && node scripts/sync-skill.js",

High

Suspicious Lifecycle Evidence

package.json automatically runs bin/postinstall.js after installation.

package.jsonView on unpkg · L9

11 "pack:all": "node scripts/pack-all.js",

12 "test:build-script": "node scripts/platform-tests.js build && node scripts/platform-tests.js run",

13 "test:package-layout": "node scripts/platform-tests.js layout && node scripts/platform-tests.js install-smoke",

14 "test:auto-select": "node scripts/platform-tests.js auto-select",

15 "verify:platforms": "node scripts/verify-platforms.js",

16 "changelog": "node ../../scripts/generate-release-changelog.js .",

17 "check-changelog": "node ../../scripts/check-release-changelog.js .",

18 "prepublishOnly": "npm run test:build-script && npm run check-changelog && npm run build && node scripts/preflight.js && npm run test:package-layout && npm run test:auto-select"

19 },

20 "files": [

21 "bin/",

22 "skills/",

23 "CHANGELOG.md",

24 "LICENSE",

25 "LICENSE.zh-CN",

26 "README.md"

27 ],

28 "keywords": [

29 "guandata",

bin/run.jsView file

Lines 145-185javascript

145 }

146 candidates.push(path.join(executableDir, "node_modules", "npm", "bin", "npx-cli.js"));

147 candidates.push(path.resolve(executableDir, "..", "node_modules", "npm",

bin/postinstall.jsView file

Lines 3-57javascript

3/**

4 * Best-effort post-install hook: refresh the installed AI skill right after

5 * a global npm install/upgrade, so users cannot forget to run

6 * `guanwf install-skill` and end up with a stale SKILL.md.

7 *

8 * Constraints:

9 * - MUST never fail the npm install: every failure path still exits 0.

10 * - Only runs for global installs (`npm install -g` / `npm link`); a local

11 * `npm install` inside a project never touches the user's home dirs.

12 * - Escape hatch: GUAN_SKIP_INSTALL_SKILL=1 skips entirely (e.g. CI images