Loading npm security reports…
JengaAgent — agentic project management CLI
LPM flags this version as an AI-agent control-surface risk. npm installation automatically modifies the consuming project's Claude and generic agent discovery directories. This injects package-controlled instruction and agent content into AI-agent control surfaces.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/postinstall.jsView on unpkg · L6Package ships non-JavaScript build or shell helper files.
hooks/on_session_end.shView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L13Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L13Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/postinstall.jsView on unpkg · L6Package ships non-JavaScript build or shell helper files.
hooks/on_session_end.shView on unpkg