registry / @lingjingai/scriptctl / 0.64.2
@lingjingai/scriptctl@0.64.2
剧本阶段统一 CLI：素材转 Script v4，并兼容 Script v3 的本地写作、精修、校验和发布。
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe postinstall performs package-owned AI-agent skill setup, a lifecycle extension risk that warrants a warning under the review policy. The inspected source does not support the scanner’s claims of command-output exfiltration or an unconsented broad control hijack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package with lifecycle scripts enabled, unless the installer opt-out is set.
Impact
The skill becomes available to those agent environments; the inspected excerpts do not establish credential exposure or remote execution.
Mechanism
The script removes and copies the package-owned scriptctl skill subdirectory under the user’s Claude, agents, and Codex skill roots.
AI rationale
The postinstall performs package-owned AI-agent skill setup, a lifecycle extension risk that warrants a warning under the review policy. The inspected source does not support the scanner’s claims of command-output exfiltration or an unconsented broad control hijack.
Evidence
package.jsonscripts/install-skill.mjs~/.claude/skills/scriptctl~/.agents/skills/scriptctl~/.codex/skills/scriptctl
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The postinstall hook runs a script that installs this package’s scriptctl skill into three AI-agent skill directories.
- The installer deletes and recopies only the scriptctl subdirectory; environment flags can opt out.
- The bundle’s npm install command is part of an explicit update operation, not evidence of an automatic install-time attack.
Evidence against
- The inspected lifecycle and bundle excerpts do not show credential collection, exfiltration, or a remote payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-skill.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/chunk-YYKX6SLG.jsView file
164`);try{return await this.tracked(m,()=>o(h))}catch(g){throw uo(g,n)?Ni(g,[...c,Ho(g,m)]):g}}}throw new Error("Text model routes cannot be empty.")}async generateText(t,n){let o=xn[...
L165: `),data:{checks:T}},J]}import{spawn as tE}from"node:child_process";var Js="@lingjingai/scriptctl",nE=`${Js}@latest`,Ad="npm";function oE(){return bi()}function iE(e){let t=/^(\d+)\...
L166: `),data:{op:"update",changed:!1,update:a}},J];let d=await t(Ad,s);if(d.error)throw new E(`Failed to start npm: ${d.error.message}`,{exitCode:me,errorCode:"UPDATE_SPAWN_FAILED",hint...
High
Child Process
Package source references child process execution.
dist/chunk-YYKX6SLG.jsView on unpkg · L164152L153: \u53EA\u8FD4\u56DE JSON \u5BF9\u8C61\u672C\u8EAB\uFF0C\u4E0D\u8981\u8F93\u51FA\u4EFB\u4F55\u89E3\u91CA\u3001\u524D\u8A00\u3001Markdown \u4EE3\u7801\u5757\u6216\u5176\u4ED6\u6587\u5...
L154: Gemini \u4E0A\u4F20\u4F1A\u6210\u529F\u3001\u968F\u540E\u7684\u6587\u4EF6\u8F6E\u8BE2/\u751F\u6210\u4F1A\u6302\uFF08Node \u5185\u7F6E fetch \u9ED8\u8BA4\u4E0D\u8D70\u4EE3\u7406\uFF...
...
L156: `),{files:{upload:c=>sf({apiKey:e,filePath:c.file,mimeType:c.config?.mimeType??"video/mp4",timeoutMs:t,proxyUrl:s,baseUrl:n}),get:c=>r.files.get(c),delete:c=>r.files.delete(c)},mod...
L157: `).trim():""}function uf(e){try{return JSON.parse(e)}catch{throw new P("invalid_response","Provider returned invalid JSON.",{details:[e.slice(0,500)]})}}var Ds=class{constructor(t,...
L158: `),a={kind:"base64",dat
Findings
1 Critical5 High4 Medium5 Low
CriticalAi Agent Control Hijackscripts/install-skill.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/chunk-YYKX6SLG.js
HighSame File Env Network Executiondist/chunk-YYKX6SLG.js
HighCommand Output Exfiltrationdist/chunk-YYKX6SLG.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-YYKX6SLG.js
MediumDynamic Requiredist/chunk-YYKX6SLG.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to @lingjingai/scriptctl@0.64.2.
See all versions of @lingjingai/scriptctl for other recorded verdicts.
- Review the evidence and your use of @lingjingai/scriptctl@0.64.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.