registry / AI-agent control-surface risk / @inizioevoke/astro-core

@inizioevoke/astro-core

This report shows the evidence for @inizioevoke/astro-core@3.3.1. 11 of 15 known versions are blocked or flagged. The newest version, 3.3.2, is flagged. See all versions.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The automatic lifecycle hook performs a broad external Claude skills mutation and destructive replacement. No user-invoked setup gate is present.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm automatically runs the post-install hook during installation.

Impact

It can replace the consumer's Claude skill configuration without an explicit user command.

Mechanism

The hook resolves the consumer root, recursively deletes matching skill directories, then copies package-provided skills into .claude/skills.

Policy narrative

Installing the package invokes its post-install hook. That hook escapes the package directory to the consuming project, removes skill directories under .claude/skills, and installs package-controlled replacements. The behavior changes an AI-agent control surface automatically and outside the package's own files.

AI rationale

The automatic lifecycle hook performs a broad external Claude skills mutation and destructive replacement. No user-invoked setup gate is present.

Evidence

package.jsonpostinstall.mjs.claude/skills

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Evidence for policy risk

The package automatically runs a post-install script.
The post-install script locates the consuming project and targets its Claude skills directory.
The script recursively removes and replaces skill directories in that external agent control surface.
The inspected carousel component only configures carousel markup and accessibility attributes.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 32 file(s), 1.68 MB of source, external domains: example.com, foo.bar, ns.adobe.com, pdfviewer.evo, www.w3.org, www.xfa.org

Source & flagged code

6 flagged

package.jsonView file

Lines 13-53json

13 "./BottomISI": "./src/components/ISI/BottomISI/index.ts",

14 "./Carousel": "./src/components/Carousel/index.ts",

15 "./CssBackgroundImage": "./src/components/CssBackgroundImage/index.ts",

16 "./CssVariables": "./src/components/CssVariables/index.ts",

17 "./FlipCard": "./src/components/FlipCard/index.ts",

18 "./InlineImage": "./src/components/InlineImage/index.ts",

19 "./Modal": "./src/components/Modal/index.ts",

20 "./ScrollContainer": "./src/components/ScrollContainer/index.ts",

21 "./Tabs": "./src/components/Tabs/index.ts",

23 "./lib/BottomISI": "./src/components/ISI/BottomISI/BottomISI.ts",

24 "./lib/Carousel": "./src/components/Carousel/Carousel.ts",

25 "./lib/FlipCard": "./src/components/FlipCard/FlipCard.ts",

26 "./lib/Modal": "./src/components/Modal/Modal.ts",

27 "./lib/ScrollContainer": "./src/components/ScrollContainer/ScrollContainer.ts",

29 "./lib/gestures/pinch": "./src/lib/client/gestures/pinch.ts",

30 "./lib/gestures/swipe": "./src/lib/client/gestures/swipe.ts"

31 },

32 "scripts": {

33 "postinstall": "node postinstall.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 },

35 "files": [

36 "agents",

37 "docs",

38 "src",

39 "postinstall.mjs"

High

Ai Review Evidence

The package automatically runs a post-install script.

package.jsonView on unpkg · L33

40 ],

41 "peerDependencies": {

42 "astro": ">=5.0.0",

43 "typescript": ">=5.0.0"

44 },

45 "devDependencies": {

46 "@astrojs/check": "^0.9.8",

47 "@astrojs/ts-plugin": "^1.10.7",

48 "@types/node": "^25.5.0",

49 "astro": "^6.0.5",

50 "pdfjs-dist": "^5.7.284",

51 "typescript": "^5.9.3"

52 }

53}

src/components/PdfViewer/pdf.worker.min.mjsView file

24* pdfjsBuild = 7e5b36c2d L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],... L26: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/components/PdfViewer/pdf.worker.min.mjsView on unpkg · L24

postinstall.mjsView file

Lines 1-19javascript

1import { cpSync, readdirSync, rmSync } from 'fs';

2import { join, dirname } from 'path';

3import { fileURLToPath } from 'url';

5const __dirname =

src/components/Carousel/Carousel.astroView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 18

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/components/Carousel/Carousel.astroView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

33"postinstall": "node postinstall.mjs" }, "files": [ "agents", "docs", "src", "po

High

Ai Review Evidence

The package automatically runs a post-install script.

package.jsonView on unpkg · L33

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/components/PdfViewer/pdf.worker.min.mjsView file

Findings

1 Critical3 High4 Medium4 Low

CriticalAi Agent Control Hijackpostinstall.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighSemantic Analysis Limitedsrc/components/Carousel/Carousel.astro

HighAi Review Evidencepackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiresrc/components/PdfViewer/pdf.worker.min.mjs

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @inizioevoke/astro-core@3.3.1.

The versions list below shows the verdict for each recorded version.

Avoid installing @inizioevoke/astro-core@3.3.1. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-28 07:33:40.920Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

15 known versions

3.3.2latestSuspiciousAgent extension lifecycle riskWarnPublishedOct 15, 2026, 12:18 AM 3.3.1shownMaliciousSoft block: AI-agent control surfaceBlockPublishedSep 23, 2026, 12:40 AM 3.3.0MaliciousSoft block: AI-agent control surfaceBlockPublishedSep 21, 2026, 9:32 PM 3.2.4MaliciousSoft block: AI-agent control surfaceBlock

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

More from @inizioevoke

Other AI-agent control-surface risk packages

Behavioral surface

Related packages

More from @inizioevoke

Other AI-agent control-surface risk packages

Source & flagged code