registry / @inizioevoke/astro-core / 3.2.1
@inizioevoke/astro-core@3.2.1
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is an unconsented install-time mutation of an AI-agent control surface, but it is limited to the package's own named skill and contains no confirmed payload delivery or exfiltration. It warrants a warning under the first-party agent-extension lifecycle policy.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm installation, through postinstall.
Impact
It can influence Claude's behavior for broad Astro-related requests in the consuming project.
Mechanism
Automatic replacement of a Claude skill directory.
AI rationale
This is an unconsented install-time mutation of an AI-agent control surface, but it is limited to the package's own named skill and contains no confirmed payload delivery or exfiltration. It warrants a warning under the first-party agent-extension lifecycle policy.
Evidence
package.jsonpostinstall.mjsagents/claude/evoke-astro-core/SKILL.md.claude/skills/evoke-astro-coreagents/claude/evoke-astro-core
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package automatically runs a postinstall script.
- The script deletes and replaces a skill directory in the consuming project's .claude/skills control surface.
- The installed skill instructs Claude to activate for broad Astro component requests, not only explicit package requests.
Evidence against
- The lifecycle script has no network, shell, credential, or environment-variable access.
- The manifest has no runtime dependency on another release of this package.
- The bundled PDF viewer is imported as a local component asset; no install-time PDF execution occurs.
Behavioral surface
ChildProcessDynamicRequireFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
Source & flagged code
5 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgsrc/components/PdfViewer/pdf.worker.min.mjsView file
24* pdfjsBuild = 7e5b36c2d
L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],...
L26: /*webpackIgnore: true*/
Medium
Dynamic Require
Package source references dynamic require/import behavior.
Findings
1 Critical2 High5 Medium4 Low
CriticalAi Agent Control Hijackpostinstall.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limitedsrc/components/Carousel/Carousel.astro
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiresrc/components/PdfViewer/pdf.worker.min.mjs
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @inizioevoke/astro-core@3.2.1.
See all versions of @inizioevoke/astro-core for other recorded verdicts.
- Review the evidence and your use of @inizioevoke/astro-core@3.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.