Loading npm security reports…

@holdyourvoice/hyv-pro@2.9.30: AI-agent control-surface risk | LPM Firewall

registry / @holdyourvoice/hyv-pro / 2.9.30

@holdyourvoice/hyv-pro@2.9.30

Paid Hold Your Voice CLI with profile-aware writing checks and MCP setup.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall silently modifies broad third-party AI-agent control surfaces and registers the package executable as an MCP server. It also installs always-on instructions that influence future agent behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install of @holdyourvoice/hyv-pro@2.9.30

Impact

Future Cursor, Claude, Codex, Windsurf, OpenCode, and Antigravity sessions can load package-controlled MCP tooling and directives.

Mechanism

unconsented install-time AI-agent configuration and instruction injection

Policy narrative

On installation, postinstall invokes setupAgents with auto-configuration enabled by default. That routine creates or edits global configuration and instruction files for multiple unrelated AI-agent products, registering the package's local MCP server and adding always-on rules without a user command or consent. These changes cause later agent sessions to load package-provided capabilities and behavioral directives.

Rationale

This is a concrete, unconsented postinstall mutation of broad foreign AI-agent control surfaces. The opt-out environment variable and lack of postinstall networking do not remove the install-time control-hijack behavior.

Evidence

package.jsonscripts/postinstall.jsscripts/postinstall-lib.jsagents/AGENTS.mddist/index.jsagents/cursor.mdagents/claude-code.mdskills/hold-your-voice/SKILL.md

Decision evidence

Source & flagged code

5 flagged

package.jsonView file

Lines 1-36json

1{

2 "name": "@holdyourvoice/hyv-pro",

3 "version": "2.9.30",

4 "description": "Paid Hold Your Voice CLI with profile-aware writing checks and MCP setup.",

5 "main": "dist/index.js",

6 "bin": {

7 "hyv": "dist/index.js",

8 "hyvoice": "dist/index.js"

9 },

10 "scripts": {

11 "build": "esbuild src/index.ts --bundle --platform=node --target=node18 --outfile=dist/index.js --format=cjs --external:canvas --banner:js='#!/usr/bin/env node'",

12 "build:debug": "esbuild src/index.ts --bundle --platform=node --target=node18 --outfile=dist/index.js --format=cjs --sourcemap --banner:js='#!/usr/bin/env node'",

13 "dev": "npm run build && node dist/index.js",

14 "validate:publish": "npm run build && node scripts/validate-publish.js",

15 "prepublishOnly": "npm run validate:publish",

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "prepare": "npm run build",

18 "test": "npm run build && vitest run",

19 "test:smoke": "npm run build && bash scripts/smoke-test.sh",

20 "test:watch": "vitest",

21 "release:patch": "npm version patch && npm publish --access public",

22 "release:minor": "npm version minor && npm publish --access public",

23 "release:major": "npm version major && npm publish --access public"

24 },

25 "keywords": [

26 "voice",

27 "writing",

28 "ai",

29 "cli",

30 "brand-voice",

31 "content-gate",

32 "hyv",

33 "cursor",

34 "claude",

35 "mcp",

36 "ai-agent",

dist/index.jsView file

11}; L12: var __commonJS = (cb, mod) => function __require() { L13: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L11

scripts/postinstall-lib.jsView file

Lines 18-58javascript

18 return JSON.parse(fs.readFileSync(markerPath, 'utf-8'));

19 } catch {

20 return null;

21 }

22}

23

scripts/install.shView file

•path = scripts/install.sh kind = build_helper sizeBytes = 3827 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/install.shView on unpkg