registry / @lingjingai/scriptctl / 0.63.7

@lingjingai/scriptctl@0.63.7

剧本阶段统一 CLI：素材转 Script v4，并兼容 Script v3 的本地写作、精修、校验和发布。

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The automatic postinstall setup mutates user-level AI-agent skill directories, creating a guarded first-party extension lifecycle risk. Source inspection found that the mutation is limited to the package-owned `scriptctl` skill subdirectories, with no confirmed exfiltration or broader control-surface change.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

npm postinstall, unless the installer is opted out or detects a source checkout.

Impact

Existing contents of those same-named skill directories are replaced; unrelated skills and agent configuration are not modified by this installer.

Mechanism

The installer removes and recopies only the `scriptctl` subdirectory beneath `.claude/skills`, `.agents/skills`, and `.codex/skills`.

AI rationale

Evidence

package.jsonscripts/install-skill.mjs~/.claude/skills/scriptctl~/.agents/skills/scriptctl~/.codex/skills/scriptctl

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The postinstall hook runs a package-owned skill installer automatically.
The installer replaces a `scriptctl` subdirectory under three AI-agent skill roots in the user's home directory.

Evidence against

The installer copies only the package's own `skills/scriptctl` directory into a same-named subdirectory.
The inspected installer shows no network request, credential access, or writes to agent configuration outside those skill subdirectories.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 259 file(s), 2.61 MB of source, external domains: 127.0.0.1, ark.cn-beijing.volces.com, generativelanguage.googleapis.com, openspeech.bytedance.com

Source & flagged code

8 flagged

package.jsonView file

Lines 44-74json

44 "keywords": [

45 "scriptctl",

46 "screenplay",

47 "cli",

48 "agent-sandbox"

49 ],

50 "license": "MIT",

51 "publishConfig": {

52 "access": "public"

53 },

54 "optionalDependencies": {

55 "@ai-sdk/provider": "^4.0.4",

56 "@ai-sdk/google": "^4.0.63",

57 "@mastra/core": "^1.64.0",

58 "zod": "^4.5.4",

59 "@ai-sdk/openai-compatible": "^3.0.48"

60 },

61 "scripts": {

62 "build": "pnpm --filter @lingjingai/screenplay build && pnpm --filter @lingjingai/review-agent build && tsc && node scripts/bundle.mjs",

63 "clean": "rm -rf dist packages/screenplay/dist",

64 "postinstall": "node scripts/install-skill.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L64

65 "install-skill": "node scripts/install-skill.mjs",

66 "pretest": "pnpm run build",

67 "test": "vitest run",

68 "pretest:coverage": "pnpm run build",

69 "test:coverage": "c8 --reporter=text --reporter=html --reporter=lcov --report-dir=coverage vitest run",

70 "test:watch": "vitest",

71 "typecheck": "tsc --noEmit",

72 "surface:snapshot": "node scripts/scriptctl-surface-snapshot.mjs"

73 }

74}

dist/infra/llm/gemini-video-model.jsView file

Lines 312-352javascript

312 }

313 }

314 return { text, finishReason, usage, raw: response };

315 });

316 return { text: value.text, finishReason: value.finishReason, attempts, usage: addTokenUsage(failedUsage, value.usage), raw: value.raw };

317 }

318 async release(media, signal) {

scripts/install-skill.mjsView file

Lines 2-42javascript

2// postinstall: 把打包进 npm 包的 scriptctl skill 装到用户根目录下的三处 skill 目录

3// （Claude Code / agents / codex），并把「本次安装对应的 scriptctl 版本号」戳进每份

4// SKILL.md 的 frontmatter + 一个 .scriptctl-version 标记文件里。

5//

6// 设计要点：

7// - 永不让安装失败：全程 try/catch，任何异常只打印警告并以 0 退出（skill 装不上不该

8// 拖垮 `npm i -g scriptctl` 本身）。

9// - 开发态跳过：源码检出（存在 src/）不是「已发布的包」，跳过，免得 dev `pnpm install`

10// 覆盖你本地手改的 skill。

11// - 可关闭：SCRIPTCTL_SKIP_SKILL_INSTALL=1 或 SCRIPTCTL_SKILL_INSTALL=0。

dist/bin.jsView file

•matchType = normalized_sha256 matchedPackage = @lingjingai/scriptctl@0.63.0 matchedPath = dist/bin.js matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.63.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/bin.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @lingjingai/scriptctl@0.62.4 matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.62.4 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/bin.jsView on unpkg

dist/usecases/ingest/view-server.jsView file

•matchType = normalized_sha256 matchedPackage = @lingjingai/scriptctl@0.63.0 matchedPath = dist/usecases/ingest/view-server.js matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.63.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/usecases/ingest/view-server.jsView on unpkg

dist/review-agent.jsView file

•matchType = normalized_sha256 matchedPackage = @lingjingai/scriptctl@0.63.0 matchedPath = dist/review-agent.js matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.63.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/review-agent.jsView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-skill.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/infra/llm/gemini-video-model.jsView file

•matchType = normalized_sha256 matchedPackage = @lingjingai/scriptctl@0.63.0 matchedPath = dist/infra/llm/gemini-video-model.js matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.63.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/infra/llm/gemini-video-model.jsView on unpkg

332// actually exercised (keeps text-only runs free of @google/genai). L333: const require = createRequire(import.meta.url); L334: function createGoogleClient(apiKey, timeoutMs, baseUrl) {

Findings

1 Critical6 High4 Medium4 Low

CriticalAi Agent Control Hijackscripts/install-skill.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Similaritydist/bin.js

HighKnown Malware Source Similaritydist/infra/llm/gemini-video-model.js

HighKnown Malware Source Similaritydist/usecases/ingest/view-server.js

HighKnown Malware Source Similaritydist/review-agent.js

HighPrevious Version Dangerous Deltadist/bin.js

MediumDynamic Requiredist/infra/llm/gemini-video-model.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

Low

Affected versions and remediation

This report applies to @lingjingai/scriptctl@0.63.7.

See all versions of @lingjingai/scriptctl for other recorded verdicts.

Review the evidence and your use of @lingjingai/scriptctl@0.63.7 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 07:08:11.454Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @lingjingai

Behavioral surface

Related packages

More from @lingjingai

Source & flagged code