registry / @jenga-ai/agent / 1.2.2

@jenga-ai/agent@1.2.2

⚠ Under review

Structured multi-agent development workflow for AI coding agents — scrum board, role-bounded scrum master / developer / tester agents, and 30+ slash-command skills. Works with Claude Code, GitHub Copilot, and Codex.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 12 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 71.3 KB of source, external domains: github.com

Source & flagged code

6 flagged

package.jsonView file

Lines 1-36json

2 "name": "@jenga-ai/agent",

3 "version": "1.2.2",

4 "description": "Structured multi-agent development workflow for AI coding agents — scrum board, role-bounded scrum master / developer / tester agents, and 30+ slash-command skills. Works with Claude Code, GitHub Copilot, and Codex.",

5 "type": "module",

6 "publishConfig": {

7 "access": "public"

8 },

9 "bin": {

10 "jenga": "./bin/jenga.js"

11 },

12 "engines": {

13 "node": ">=14.13.1"

14 },

15 "scripts": {

16 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 "validate:npm-metadata": "bash scripts/validate_npm_metadata.sh",

18 "ui:dev": "npm run ui:dev --prefix project/app",

19 "ui:build": "npm run ui:build --prefix project/app",

20 "api:start": "npm run api:start --prefix project/app",

21 "api:dev": "npm run api:dev --prefix project/app",

22 "dashboard:start": "npm run dashboard:start --prefix project/app",

23 "dashboard:open": "npm run dashboard:open --prefix project/app"

24 },

25 "files": [

26 "skills/",

27 "agents/",

28 "hooks/",

29 "scripts/",

30 "templates/",

31 "bin/",

32 "lib/",

33 "mcp/",

34 "README.md",

35 "LICENSE"

36 ],

scripts/postinstall.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/**

3 * postinstall.js — JengaAgent consumer installation hook

4 *

5 * Runs automatically when a consumer project installs jenga-agent via npm.

6 * Copies the discovery-bound dirs — `skills/` and `agents/` — into BOTH

7 * `<consumer>/.claude/` (where Claude Code looks) and `<consumer>/.agents/`

8 * (where non-Claude agents like Copilot / custom look, per the framework's

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/postinstall.jsView on unpkg · L6

lib/generate-agent-context.jsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: argetpath, "utf8"); if (existingcontent.includes(content_start)) { writemanagedfile(targetpath, rendered); written.push({ filename: target.filename, mode: "direct-update" }); } else { writefilesync(jpath, rendered, "utf8"); insertorupdatereference(targetpath, jfilename); written.push({ filename: target.filename, mode: "collision-created-j-file" }); } continu

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/generate-agent-context.jsView on unpkg

lib/inject-settings.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { readfilesync, writefilesync, existssync, mkdirsync } from "fs"; import { join, resolve, dirname } from "path"; import { homedir } from "os"; import { fileurltopath } from "url"; const hook_type = "command"; const __dirname = dirname(fileurltopath(import.meta.url)); const package_root = join(__dirname, "..");

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

lib/inject-settings.jsView on unpkg

hooks/on_session_end.shView file

•path = hooks/on_session_end.sh kind = build_helper sizeBytes = 18439 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/on_session_end.shView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

@jenga-ai/agent@1.2.2

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code