Loading npm security reports…

@impakers/debug@1.9.7: AI-agent control-surface risk | LPM Firewall

registry / @impakers/debug / 1.9.7

@impakers/debug@1.9.7

Client feedback collection tool for Impakers OS

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically changes the consumer project's Claude agent configuration and may modify its ESLint configuration. These changes occur without a separate setup command.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm installation runs the postinstall lifecycle script.

Impact

The package can persist package-authored instructions in a foreign AI-agent control surface and alter project tooling configuration.

Mechanism

Automatic consumer-project agent-skill installation and configuration rewriting.

Policy narrative

On installation, package.json invokes scripts/setup.mjs. The script resolves the consumer project root, writes a managed SKILL.md under .claude/skills, and calls installEslintPreset to patch a supported JavaScript ESLint config. The injected skill directs AI debugging agents' behavior. This is automatic lifecycle-time mutation of a consumer-controlled AI-agent surface, not an explicit user setup action.

AI rationale

The automatic postinstall writes a Claude skill into the consuming project and can rewrite its ESLint configuration. This is unconsented install-time mutation of a foreign AI-agent control surface and consumer project files.

Evidence

package.jsonscripts/setup.mjstemplates/ui-mapping-skill.md.claude/skills/impakers-ui-mapping/SKILL.mdeslint.config.mjseslint.config.jseslint.config.cjs

Decision evidence

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/setup.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

scripts/setup.mjsView file

7// L8: // 1. .claude/skills/impakers-ui-mapping/SKILL.md 설치 L9: // 에이전트가 UI 코드를 짤 때 파일 매핑 규칙을 알고 있게 만든다. ... L114: /** L115: * .claude/skills/impakers-ui-mapping/SKILL.md 를 깐다. L116: * ... L126: L127: const target = path.join(root, ".claude", "skills", "impakers-ui-mapping", "SKILL.md"); L128: const next = fs.readFileSync(source, "utf-8"); ... L136: if (current === next) return; L137: fs.writeFileSync(target, next); L138: note(`스킬 갱신: ${rel(root, target)}`);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/setup.mjsView on unpkg · L7

24Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network, execution+network L24: L25: import { spawnSync } from "node:child_process"; L26: import * as fs from "node:fs"; ... L39: /** postinstall은 조용해야 한다. 명시 실행(npx)일 때만 수다스러워진다. */ L40: const explicit = process.argv.includes("--explicit") || !process.env.npm[redacted]; L41: const silent = process.env.npm[redacted] === "silent"; ... L58: function resolveConsumerRoot() { L59: const candidate = explicit ? process.cwd() : process.env.INIT_CWD; L60: if (!candidate) return null; ... L88: L89: const manifestPath = path.join(root, "package.json"); L90: if (!fs.existsSync(manifestPath)) return "프로젝트 package.json 없음";

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

scripts/setup.mjsView on unpkg · L24

•matchType = previous_version_dangerous_delta matchedPackage = @impakers/debug@1.9.3 matchedIdentity = npm:QGltcGFrZXJzL2RlYnVn:1.9.3 similarity = 0.471 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/setup.mjsView on unpkg

dist/debug-widget-OKV3IGFS.jsView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/debug-widget-OKV3IGFS.jsView on unpkg

Source & flagged code

5 flagged

package.jsonView file

Lines 99-139json

99 "require": {

100 "types": "./dist/telemetry-next.d.ts",

101 "default": "./dist/telemetry-next.js"

102 }

103 }

104 },

105 "bin": {

106 "impakers-debug-setup": "./scripts/setup.mjs"

107 },

108 "files": [

109 "dist",

110 "scripts/setup.mjs",

111 "templates",

112 "CHANGELOG.md"

113 ],

114 "scripts": {

115 "build": "tsup",

116 "watch": "tsup --watch",

117 "dev": "pnpm build && pnpm watch",

118 "prepublishOnly": "pnpm build",

119 "postinstall": "node ./scripts/setup.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L119

120 "test": "vitest run",

121 "test:watch": "vitest"

122 },

123 "peerDependencies": {

124 "eslint": ">=8.57.0",

125 "next": ">=13.4.0",

126 "react": ">=18.0.0",

127 "react-dom": ">=18.0.0"

128 },

129 "peerDependenciesMeta": {

130 "eslint": {

131 "optional": true

132 },

133 "next": {

134 "optional": true

135 },

136 "react": {

137 "optional": true

138 },

139 "react-dom": {

scripts/setup.mjsView file

Lines 1-44javascript

1#!/usr/bin/env node

2// =============================================================================

3// @impakers/debug — 설치 시 자동 셋업

4// =============================================================================

5//

6// `npm i @impakers/debug` 하면 postinstall로 이 스크립트가 돌면서 두 가지를 한다.

7//

8// 1. .claude/skills/impakers-ui-mapping/SKILL.md 설치

9// 에이전트가 UI 코드를 짤 때 파일 매핑 규칙을 알고 있게 만든다.

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/debug-widget-OKV3IGFS.jsView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/debug-widget-OKV3IGFS.jsView on unpkg