@inizioevoke/veeva-astroclm-core@1.3.9: AI-agent control-surface | LPM Firewall

Loading npm security reports…

@inizioevoke/veeva-astroclm-core@1.3.9: AI-agent control-surface | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8"scripts": { "prepublishOnly": "npm run build", "build": "npx tsx build.ts --cmd pre && tsc && npx tsx build.ts --cmd post", "postinstall": "node postinstall.mjs" }

High

Suspicious Lifecycle Evidence

The manifest runs postinstall automatically.

package.jsonView on unpkg · L8

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.mjsView file

1Install-time AI-agent control hijack evidence: L1: import { cpSync, readdirSync, rmSync } from 'fs'; L2: import { join, dirname } from 'path'; ... L8: const projectRoot = join(__dirname, '..', '..', '..'); L9: const destDir = join(projectRoot, '.claude', 'skills'); L10: const src = join(__dirname, 'agents', 'claude'); ... L15: rmSync(skillDestDir, { recursive: true, force: true }); L16: cpSync(join(src, dir), skillDestDir, { recursive: true }); L17: } Payload evidence from agents/claude/evoke-analytics-auditor/SKILL.md: L66: Extract the port from that output and use it as `DEV_PORT` for all subsequent URLs L67: (e.g. `http://localhost:${DEV_PORT}/home/`). L68:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

postinstall.mjsView on unpkg · L1

7// Resolve the consuming project's root (three levels up from node_modules/@inizioevoke/veeva-astroclm-core) const projectRoot = join(__dirname, '..', '..', '..'); const destDir = join(projectRoot, '.claude', 'skills'); const src = join(__dirname, 'agents', 'claude'); const skillDirs = readdirSync(src); for (const dir of skillDirs) { const skillDestDir = join(destDir, dir); rmSync(skillDestDir, { recursive: true, force: true }); cpSync(join(src, dir), skillDestDir, { recursive: true }); }

High

Suspicious Lifecycle Evidence

The install hook removes and replaces skill directories under the consuming project's .claude/skills control surface.

postinstall.mjsView on unpkg · L7

src/components/scripts/PlatformScript/PlatformScript.astroView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/components/scripts/PlatformScript/PlatformScript.astroView on unpkg

agents/claude/evoke-analytics-auditor/SKILL.mdView file

20## Instructions ### Step 0 — Load the Playwright MCP tool schemas Before doing anything else, call: ``` ToolSearch({ query: "select:mcp__plugin_playwright_playwright__browser_navigate,mcp__plugin_playwright_playwright__browser_click,mcp__plugin_playwright_playwright__browser_console_messages,mcp__plugin_playwright_playwright__browser_snapshot,mcp__plugin_playwright_playwright__browser_wait_for,mcp__plugin_playwright_playwright__browser_evaluate,mcp__plugin_playwright_playwright__browser_handle_dialog,mcp__plugin_playwright_playwright__browser_close" }) ``` You will need all of those tools

High

Ai Review Evidence

A bundled injected skill directs an AI agent to load browser automation tools.

agents/claude/evoke-analytics-auditor/SKILL.mdView on unpkg · L20

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

8"scripts": { "prepublishOnly": "npm run build", "build": "npx tsx build.ts --cmd pre && tsc && npx tsx build.ts --cmd post", "postinstall": "node postinstall.mjs" }

High

Suspicious Lifecycle Evidence

The manifest runs postinstall automatically.

package.jsonView on unpkg · L8

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

postinstall.mjsView file

1Install-time AI-agent control hijack evidence: L1: import { cpSync, readdirSync, rmSync } from 'fs'; L2: import { join, dirname } from 'path'; ... L8: const projectRoot = join(__dirname, '..', '..', '..'); L9: const destDir = join(projectRoot, '.claude', 'skills'); L10: const src = join(__dirname, 'agents', 'claude'); ... L15: rmSync(skillDestDir, { recursive: true, force: true }); L16: cpSync(join(src, dir), skillDestDir, { recursive: true }); L17: } Payload evidence from agents/claude/evoke-analytics-auditor/SKILL.md: L66: Extract the port from that output and use it as `DEV_PORT` for all subsequent URLs L67: (e.g. `http://localhost:${DEV_PORT}/home/`). L68:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

postinstall.mjsView on unpkg · L1

7// Resolve the consuming project's root (three levels up from node_modules/@inizioevoke/veeva-astroclm-core) const projectRoot = join(__dirname, '..', '..', '..'); const destDir = join(projectRoot, '.claude', 'skills'); const src = join(__dirname, 'agents', 'claude'); const skillDirs = readdirSync(src); for (const dir of skillDirs) { const skillDestDir = join(destDir, dir); rmSync(skillDestDir, { recursive: true, force: true }); cpSync(join(src, dir), skillDestDir, { recursive: true }); }

High

Suspicious Lifecycle Evidence

The install hook removes and replaces skill directories under the consuming project's .claude/skills control surface.

postinstall.mjsView on unpkg · L7

src/components/scripts/PlatformScript/PlatformScript.astroView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/components/scripts/PlatformScript/PlatformScript.astroView on unpkg

agents/claude/evoke-analytics-auditor/SKILL.mdView file

20## Instructions ### Step 0 — Load the Playwright MCP tool schemas Before doing anything else, call: ``` ToolSearch({ query: "select:mcp__plugin_playwright_playwright__browser_navigate,mcp__plugin_playwright_playwright__browser_click,mcp__plugin_playwright_playwright__browser_console_messages,mcp__plugin_playwright_playwright__browser_snapshot,mcp__plugin_playwright_playwright__browser_wait_for,mcp__plugin_playwright_playwright__browser_evaluate,mcp__plugin_playwright_playwright__browser_handle_dialog,mcp__plugin_playwright_playwright__browser_close" }) ``` You will need all of those tools

High

Ai Review Evidence

A bundled injected skill directs an AI agent to load browser automation tools.

agents/claude/evoke-analytics-auditor/SKILL.mdView on unpkg · L20