Loading npm security reports…

@kg-ai/kugou-skill@0.1.14: AI-agent control-surface risk | LPM Firewall

registry / @kg-ai/kugou-skill / 0.1.14

@kg-ai/kugou-skill@0.1.14

Kugou Skill CLI

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically writes package-controlled agent skill content into several unrelated AI-agent configuration areas. The writes occur whenever the corresponding parent directory already exists.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall during package installation

Impact

Package content can influence multiple installed AI agents without a separate user setup action.

Mechanism

automatic cross-platform AI-agent skill installation

Policy narrative

Installing the package invokes a postinstall script. That script detects existing skill parents for multiple independent AI-agent products, creates package-specific directories, and copies its skill instructions and references into each. This is an unconsented, broad mutation of AI-agent control surfaces rather than a user-invoked setup command.

Rationale

The automatic postinstall writes package-controlled instructions into several foreign AI-agent skill locations. This meets the policy threshold for malicious install-hook abuse even though no separate exfiltration behavior was confirmed in the inspected JavaScript.

Evidence

package.jsonscripts/install.jsSKILL.mdreferencesbin/kugou-cli~/.claude/skills/kugou-skill/SKILL.md~/.mavis/skills/kugou-skill/SKILL.md~/.hermes/skills/kugou-skill/SKILL.md~/.openclaw/skills/kugou-skill/SKILL.md

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

32L33: fs.copyFileSync(srcBin, destBin); L34: fs.chmodSync(destBin, 0o755); ... L39: const skillDirs = [ L40: path.join(os.homedir(), '.claude', 'skills', 'kugou-skill'), L41: path.join(os.homedir(), '.mavis', 'skills', 'kugou-skill'), ... L43: path.join(os.homedir(), '.openclaw', 'skills', 'kugou-skill'), L44: path.join(os.homedir(), '.codex', 'skills', 'kugou-skill'), L45: path.join(os.homedir(), '.workbuddy', 'skills', 'kugou-skill'), ... L76: if (!fs.existsSync(skillDir)) { L77: fs.mkdirSync(skillDir, { recursive: true }); L78: }

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L32

•matchType = previous_version_dangerous_delta matchedPackage = @kg-ai/kugou-skill@0.1.4 matchedIdentity = npm:QGtnLWFpL2t1Z291LXNraWxs:0.1.4 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/install.jsView on unpkg

bin/linux-arm64/kugou-cliView file

•path = bin/linux-arm64/kugou-cli kind = native_binary sizeBytes = 7995576 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/linux-arm64/kugou-cliView on unpkg

scripts/build-all.jsView file

•matchType = normalized_sha256 matchedPackage = @kg-ai/kugou-skill@0.1.13 matchedPath = scripts/build-all.js matchedIdentity = npm:QGtnLWFpL2t1Z291LXNraWxs:0.1.13 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build-all.jsView on unpkg

scripts/run.jsView file

•matchType = normalized_sha256 matchedPackage = @kg-ai/kugou-skill@0.1.13 matchedPath = scripts/run.js matchedIdentity = npm:QGtnLWFpL2t1Z291LXNraWxs:0.1.13 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run.jsView on unpkg

Source & flagged code

7 flagged

package.jsonView file

Lines 1-28json

1{

2 "name": "@kg-ai/kugou-skill",

3 "version": "0.1.14",

4 "description": "Kugou Skill CLI",

5 "main": "index.js",

6 "bin": {

7 "kugou-cli": "./scripts/run.js"

8 },

9 "scripts": {

10 "postinstall": "node ./scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L10

11 },

12 "keywords": [

13 "cli",

14 "kugou"

15 ],

16 "files": [

17 "bin",

18 "scripts",

19 "SKILL.md",

20 "references"

21 ],

22 "author": "",

23 "license": "MIT",

24 "engines": {

25 "node": ">=16"

26 }

27}

28

scripts/install.jsView file

Lines 12-52javascript

12 'darwin': { dir: `darwin-${arch}`, exe: 'kugou-cli' },

13 'linux': { dir: `linux-${arch}`, exe: 'kugou-cli' },

14 'win32': { dir: `win32-x64`, exe: 'kugou-cli.exe' }

bin/linux-arm64/kugou-cliView file

•path = bin/linux-arm64/kugou-cli kind = native_binary sizeBytes = 7995576 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/linux-arm64/kugou-cliView on unpkg

scripts/build-all.jsView file

•matchType = normalized_sha256 matchedPackage = @kg-ai/kugou-skill@0.1.13 matchedPath = scripts/build-all.js matchedIdentity = npm:QGtnLWFpL2t1Z291LXNraWxs:0.1.13 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build-all.jsView on unpkg

scripts/run.jsView file

•matchType = normalized_sha256 matchedPackage = @kg-ai/kugou-skill@0.1.13 matchedPath = scripts/run.js matchedIdentity = npm:QGtnLWFpL2t1Z291LXNraWxs:0.1.13 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/run.jsView on unpkg