Loading npm security reports…

@ikon85/agent-workflow-kit@0.29.1: Suspicious npm security report | LPM Firewall

registry / @ikon85/agent-workflow-kit / 0.29.1

@ikon85/agent-workflow-kit@0.29.1

Portable AI-agent workflow skills (plan → execute → land → learn) for Claude Code & Codex — grilling, TDD, diagnosis, two-axis code review, cross-model Codex review, design & domain-modeling, plus a skill router (ask-matt). npx init/update/diff/uninstall.

AI Security Review

scanned 19h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time malicious behavior is established. The explicit CLI installs first-party agent workflow skills and may guide additive hook configuration; an optional security helper downloads a pinned gitleaks binary.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `agent-workflow-kit init` or follows/runs its setup/security workflow.

Impact

Consumer-repo agent skill/config surface can be changed only through explicit workflow actions.

Mechanism

User-invoked agent-extension installation and optional checksum-verified tool provisioning.

Rationale

This is not malicious: no lifecycle execution, exfiltration, covert payload, or unconsented broad agent-control mutation was found. It warrants a warning because it deliberately provisions first-party AI-agent extensions and optional hook configuration in consumer projects.

Evidence

package.jsonsrc/cli.mjssrc/commands/init.mjssrc/commands/uninstall.mjsscripts/security/ensure-gitleaks.mjs.agents/skills/setup-workflow/SKILL.md.agents/skills/diagnose/scripts/hitl-loop.template.sh.agents/skills/**.claude/**.claude/settings.json

Network endpoints1

/gitleaks/gitleaks/releases/download/v8.30.1

Source & flagged code

5 flagged · loading source

scripts/codex-exec-scenarios/fake-codex.mjsView file

2import { appendFileSync, writeFileSync } from 'node:fs'; L3: import { spawn } from 'node:child_process'; L4:

High

Child Process

Package source references child process execution.

scripts/codex-exec-scenarios/fake-codex.mjsView on unpkg · L2

scripts/build-kit.test.mjsView file

164assert.ok(files.every((path) => !path.includes('__pycache__') && !path.endsWith('.pyc'))); L165: const pkg = JSON.parse(execFileSync('node', ['-p', 'JSON.stringify(require("./package.json"))'], { L166: cwd: REPO, encoding: 'utf8', ... L174: L175: test('packed scoped artifact keeps the existing npx default-bin inference', async () => { L176: const destination = await mkdtemp(join(tmpdir(), 'awkit-pack-'));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/build-kit.test.mjsView on unpkg · L164

.agents/skills/diagnose/scripts/hitl-loop.template.shView file

•path = .[redacted]-loop.template.sh kind = payload_in_excluded_dir sizeBytes = 1164 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/diagnose/scripts/hitl-loop.template.shView on unpkg

•path = .[redacted]-loop.template.sh kind = build_helper sizeBytes = 1164 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/diagnose/scripts/hitl-loop.template.shView on unpkg

scripts/release-state.test.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @ikon85/agent-workflow-kit@0.29.0 matchedIdentity = npm:[redacted]:0.29.0 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/release-state.test.mjsView on unpkg

Source & flagged code

5 flagged

scripts/codex-exec-scenarios/fake-codex.mjsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { appendFileSync, writeFileSync } from 'node:fs';

3import { spawn } from 'node:child_process';

4

High

Child Process

Package source references child process execution.

scripts/codex-exec-scenarios/fake-codex.mjsView on unpkg · L2

5const args = process.argv.slice(2);

6const scenario = process.env.FAKE_CODEX_SCENARIO ?? 'ok';

7const pause = Number(process.env.FAKE_CODEX_PAUSE_MS ?? 1_000);

8

9if (args.includes('--version') || args[0] === '--version') {

10 console.log(`codex-cli ${process.env.FAKE_CODEX_VERSION ?? '0.144.6'}`);

11 process.exit(0);

12}

13if (args[0] === 'login' && args[1] === 'status') {

14 if (scenario === 'auth-fail') {

15 console.error('Not logged in');

16 process.exit(1);

17 }

18 console.log('Logged in using fake credentials');

19 process.exit(0);

20}

21if (args.includes('--help')) {

22 const resumeHelp = args[0] === 'exec' && args[1] === 'resume';

scripts/build-kit.test.mjsView file

Lines 144-184javascript

144 await writeFile(runtimeLog, `${new Date().toISOString()} runtime-only\n`);

145 try {

146 const output =

.agents/skills/diagnose/scripts/hitl-loop.template.shView file

•path = .[redacted]-loop.template.sh kind = payload_in_excluded_dir sizeBytes = 1164 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.agents/skills/diagnose/scripts/hitl-loop.template.shView on unpkg

•path = .[redacted]-loop.template.sh kind = build_helper sizeBytes = 1164 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.agents/skills/diagnose/scripts/hitl-loop.template.shView on unpkg

scripts/release-state.test.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @ikon85/agent-workflow-kit@0.29.0 matchedIdentity = npm:[redacted]:0.29.0 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/release-state.test.mjsView on unpkg