registry / @jenga-ai/agent / 1.1.0

@jenga-ai/agent@1.1.0

⚠ Under review

JengaAgent — agentic project management CLI

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 10 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 64.9 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 1-33json

2 "name": "@jenga-ai/agent",

3 "version": "1.1.0",

4 "description": "JengaAgent — agentic project management CLI",

5 "type": "module",

6 "publishConfig": {

7 "access": "public"

8 },

9 "bin": {

10 "jenga": "./bin/jenga.js"

11 },

12 "scripts": {

13 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L13

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L13

14 "ui:dev": "npm run ui:dev --prefix project/app",

15 "ui:build": "npm run ui:build --prefix project/app",

16 "api:start": "npm run api:start --prefix project/app",

17 "api:dev": "npm run api:dev --prefix project/app",

18 "dashboard:start": "npm run dashboard:start --prefix project/app",

19 "dashboard:open": "npm run dashboard:open --prefix project/app"

20 },

21 "files": [

22 "skills/",

23 "agents/",

24 "hooks/",

25 "scripts/",

26 "templates/",

27 "bin/",

28 "lib/",

29 "mcp/",

30 "README.md",

31 "LICENSE"

32 ],

33 "repository": {

scripts/postinstall.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/**

3 * postinstall.js — JengaAgent consumer installation hook

4 *

5 * Runs automatically when a consumer project installs jenga-agent via npm.

6 * Copies the discovery-bound dirs — `skills/` and `agents/` — into BOTH

7 * `<consumer>/.claude/` (where Claude Code looks) and `<consumer>/.agents/`

8 * (where non-Claude agents like Copilot / custom look, per the framework's

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L6

lib/inject-settings.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { readfilesync, writefilesync, existssync, mkdirsync } from "fs"; import { join, resolve, dirname } from "path"; import { homedir } from "os"; import { fileurltopath } from "url"; const hook_type = "command"; const __dirname = dirname(fileurltopath(import.meta.url)); const package_root = join(__dirname, "..");

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/inject-settings.jsView on unpkg

hooks/on_session_end.shView file

•path = hooks/on_session_end.sh kind = build_helper sizeBytes = 9268 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/on_session_end.shView on unpkg

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

@jenga-ai/agent@1.1.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code