registry / @inkeep/open-knowledge / 0.31.0

@inkeep/open-knowledge@0.31.0

AI Security Review

scanned 21d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall silently installs a global OpenKnowledge skill into detected AI-agent hosts. This mutates a broad, foreign agent control surface without user invocation.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Trigger

npm/bun install or npx cache population

Impact

Persistent agent-behavior modification across detected hosts.

Mechanism

postinstall spawns npx skills add --agent * globally

Policy narrative

On installation, the package imports its bundled runtime and calls installUserSkill. That function spawns npx to install a bundled skill globally with --agent *, targeting detected AI-agent hosts and recording persistent install state. This occurs without an explicit user setup command.

Rationale

The package has a concrete unconsented postinstall path that mutates a broad AI-agent control surface. Under the install-control-surface policy, this requires blocking regardless of the benign-looking bundled skill content.

Evidence

package.jsonscripts/postinstall.mjsdist/dist-Bu8EnbFm.mjsdist/assets/skills/discovery/SKILL.md~/.agents/skills/open-knowledge-discovery~/.ok/skill-install-events.jsonl

Decision evidence

public snapshot

@inkeep/open-knowledge@0.31.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code