registry / @lingjingai/scriptctl / 0.65.1
@lingjingai/scriptctl@0.65.1
剧本阶段统一 CLI：素材转 Script v4，并兼容 Script v3 的本地写作、精修、校验和发布。
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe source confirms automatic first-party agent skill installation with replacement of same-name user skill folders. This supports a warning for agent extension lifecycle risk; the inspected behavior does not establish broader agent-control mutation or data transfer.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installing the package runs its postinstall hook, unless an environment-variable opt-out is set.
Impact
The installation can replace an existing scriptctl skill and expose future agent sessions to the package’s skill instructions without a separate affirmative setup step.
Mechanism
The hook copies the package-owned skill into the Claude, agents, and Codex skill folders under the user’s home directory.
AI rationale
The source confirms automatic first-party agent skill installation with replacement of same-name user skill folders. This supports a warning for agent extension lifecycle risk; the inspected behavior does not establish broader agent-control mutation or data transfer.
Evidence
package.jsonscripts/install-skill.mjs.claude/skills/scriptctl.agents/skills/scriptctl.codex/skills/scriptctl
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs scripts/install-skill.mjs automatically through its postinstall hook.
- The installer targets the home-directory .claude, .agents, and .codex skill folders and provides environment-variable opt-outs, but no affirmative consent check.
- For each target, the installer removes the existing scriptctl directory and copies in the package’s skill; its main function runs when the installer executes.
Evidence against
- The behavior installs this package’s own scriptctl skill rather than changing agent-wide settings or sending data to a remote endpoint.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-skill.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/chunk-5KDKNZCX.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @lingjingai/scriptctl@0.64.3
matchedIdentity = npm:QGxpbmdqaW5nYWkvc2NyaXB0Y3Rs:0.64.3
similarity = 0.800
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-5KDKNZCX.jsView on unpkg164`);try{return await this.tracked(y,()=>o(h))}catch(m){throw fo(m,n)?Pi(m,[...c,Ho(m,y)]):m}}}throw new Error("Text model routes cannot be empty.")}async generateText(t,n){let o=wn[...
L165: `),data:{checks:T}},J]}import{spawn as cE}from"node:child_process";var Ks="@lingjingai/scriptctl",dE=`${Ks}@latest`,bd="npm";function pE(){return Ri()}function lE(e){let t=/^(\d+)\...
L166: `),data:{op:"update",changed:!1,update:a}},J];let d=await t(bd,s);if(d.error)throw new S(`Failed to start npm: ${d.error.message}`,{exitCode:ge,errorCode:"UPDATE_SPAWN_FAILED",hint...
Findings
2 Critical6 High4 Medium4 Low
CriticalAi Agent Control Hijackscripts/install-skill.mjs
CriticalPrevious Version Dangerous Deltadist/chunk-5KDKNZCX.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/chunk-5KDKNZCX.js
HighSame File Env Network Executiondist/chunk-5KDKNZCX.js
HighCommand Output Exfiltrationdist/chunk-5KDKNZCX.js
HighTrigger Reachable Command Output Exfiltrationdist/chunk-5KDKNZCX.js
HighObfuscated
MediumDynamic Requiredist/chunk-5KDKNZCX.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @lingjingai/scriptctl@0.65.1.
See all versions of @lingjingai/scriptctl for other recorded verdicts.
- Review the evidence and your use of @lingjingai/scriptctl@0.65.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.