@itcase/agent-skills@1.0.12: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@itcase/agent-skills@1.0.12: AI-agent control-surface risk | LPM Firewall

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

10"postinstall": "node scripts/postinstall.js", "prepare": "husky", "semantic-release": "semantic-release" }, "type

High

Suspicious Lifecycle Evidence

package.json automatically runs scripts/postinstall.js after installation.

package.jsonView on unpkg · L10

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

20function findProjectRoot(startDir = process.env.INIT_CWD || process.cwd()) { let currentDir = resolve(startDir) while (true) { const packageJsonPath = join(currentDir, 'package.json') if (existsSync(packageJsonPath) && currentDir !== packageRoot) { return curre

High

Ai Review Evidence

The installer selects the consumer project using INIT_CWD or the working directory.

scripts/postinstall.jsView on unpkg · L20

130const projectRoot = findProjectRoot() const targetCursorPath = join(projectRoot, '.cursor') const targetCursorRulesPath = join(targetCursorPath, 'rules') const targetCursorSkillsPath = join(targetCursorPath, 'skills') const targetCursorGuidesPath = join(targ

High

Ai Review Evidence

It targets the consumer project's .cursor/rules and .cursor/skills directories.

scripts/postinstall.jsView on unpkg · L130

119if (existsSync(dest)) { rmSync(dest, { recursive: true, force: true }) } if (flatExt) { return

High

Ai Review Evidence

Synchronization recursively deletes existing destination directories before copying package content.

scripts/postinstall.jsView on unpkg · L119

169// Cursor project rules: flat `.mdc` with YAML frontmatter installCursorSubdir('rules', packageRulesPath, targetCursorRulesPath, { flatExt: '.mdc', }) installCursorSubdir('skills', packageSkillsPath, targetCursorSkillsPath) installCursorSubdir('guides', packageGuidesPath, targetCursorGuidesPath)

Lines 99-179javascript

99 const entries = readdirSync(src, { withFileTypes: true })

100

101 for (const entry of entries) {

102 if (!entry.isFile() || !entry.name.endsWith(extension)) {

103 continue

104 }

105

106 const content = readFileSync(join(src, entry.name), 'utf-8')

107 writeFileSync(join(dest, entry.name), content, 'utf-8')

108 }

109

110 return true

111}

112

113/** Mirror source → dest: remove dest first so deleted rules/skills disappear. */

114function syncDirectory(src, dest, { flatExt } = {}) {

115 if (!existsSync(src)) {

116 return false

117 }

118

119 if (existsSync(dest)) {

120 rmSync(dest, { recursive: true, force: true })

121 }

122

123 if (flatExt) {

124 return copyFlatFiles(src, dest, flatExt)

High

Ai Review Evidence

Synchronization recursively deletes existing destination directories before copying package content.

scripts/postinstall.jsView on unpkg · L119

125 }

126

127 return copyDirectory(src, dest)

128}

129

130const projectRoot = findProjectRoot()

131const targetCursorPath = join(projectRoot, '.cursor')

132const targetCursorRulesPath = join(targetCursorPath, 'rules')

133const targetCursorSkillsPath = join(targetCursorPath, 'skills')

134const targetCursorGuidesPath = join(targetCursorPath, 'guides')

High

Ai Review Evidence

It targets the consumer project's .cursor/rules and .cursor/skills directories.

scripts/postinstall.jsView on unpkg · L130

135const targetTmpCursorReportsPath = join(projectRoot, 'tmp', 'cursor', 'reports')

136

137// Source of truth: package rules/ + skills/ (never package .cursor/)

138const packageRulesPath = join(packageRoot, 'rules')

139const packageSkillsPath = join(packageRoot, 'skills')

140const packageGuidesPath = join(packageRoot, 'guides')

141

142function installCursorSubdir(label, packagePath, targetPath, options = {}) {

143 if (!existsSync(packagePath)) {

144 return

145 }

146

147 const list = options.flatExt

148 ? getEntryList(packagePath, { filesWithExt: options.flatExt })

149 : getEntryList(packagePath)

150 const synced = syncDirectory(packagePath, targetPath, options)

151

152 if (synced) {

153 console.log(`✓ .cursor ${label} synced successfully`)

154 if (list.length > 0) {

155 console.log(` Installed ${label}:`)

156 list.forEach((name) => {

157 console.log(` - ${name}`)

158 })

159 } else {

160 console.log(` (no ${label})`)

161 }

162 }

163}

164

165try {

166 // Ensure reports directory exists for skills output

167 mkdirSync(targetTmpCursorReportsPath, { recursive: true })

168

169 // Cursor project rules: flat `.mdc` with YAML frontmatter

170 installCursorSubdir('rules', packageRulesPath, targetCursorRulesPath, {

171 flatExt: '.mdc',

172 })

173 installCursorSubdir('skills', packageSkillsPath, targetCursorSkillsPath)

174 installCursorSubdir('guides', packageGuidesPath, targetCursorGuidesPath)

High

Ai Review Evidence

Top-level execution installs rules and skills without a consent prompt or saved preference check.

scripts/postinstall.jsView on unpkg · L169

175} catch (error) {

176 console.error('✗ Error installing agent skills/rules:', error.message)

177 process.exit(1)

178}

179