registry / @looop-games/cli / 0.1.17

@looop-games/cli@0.1.17

Looop game development CLI — dev server, login, and publishing for standalone Looop games.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack behavior is present. Explicit `looop create` and `looop update` can install and reconcile an engine-supplied agent surface in a game project, including managed `AGENTS.md` content.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `looop create` or `looop update` in a game project.

Impact

Changes AI-agent-visible project instructions and skills; modified or unowned files are retained rather than overwritten.

Mechanism

Authenticated engine download followed by project-scoped agent instruction and skill reconciliation.

Rationale

Source inspection found a guarded, explicit project agent-surface setup path rather than malware. Per policy, first-party package-owned agent extension setup warrants a warning even though no unconsented install-time mutation was found.

Evidence

package.jsonbin/looop.mjslib/create.mjslib/update.mjslib/agent-surface.mjslib/engine.mjslib/feedback.mjsAGENTS.md.claude/skills/.agents/skills.looop/agent-surface.json

Network endpoints1

play.looop.games/api/creator/engine

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`lib/update.mjs` explicitly updates project `.claude/skills/` and `AGENTS.md`.
`lib/agent-surface.mjs` copies, rewrites, and removes package-owned agent-surface files.
`lib/engine.mjs` downloads an authenticated engine tarball before reconciliation.
`lib/create.mjs` creates `.agents/skills` as a symlink to `.claude/skills`.

Evidence against

`package.json` has no preinstall, install, postinstall, or prepare hook.
`bin/looop.mjs` invokes mutation only for explicit `create` or `update` commands.
`lib/agent-surface.mjs` tracks hashes and preserves modified or unowned files.
`lib/feedback.mjs` confines uploaded attachments to the game directory and requires `looop feedback`.
Observed network calls target the package-aligned Looop service with bearer authentication.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 26 file(s), 165 KB of source, external domains: play.looop.games, www.partykit.io

Source & flagged code

2 flagged

lib/lint.mjsView file

Lines 11-51javascript

11// command resolves them out of the game's installed engine, which is the very

12// same file its eslint.config.js imports. One copy: the gate and the editor

13// cannot disagree.

14//

15// Escape hatch: `// eslint-disable-next-line looop/<rule>` — the one every

16// developer already knows. This is mandatory, not a nicety: creators are not

17// developers, and a false positive must never wall someone out of their own

18// test command with no way through.

19import { existsSync } from 'node:fs';

20import { createRequire } from 'node:module';

21import { join, relative } from 'node:path';

22import { pathToFileURL } from 'node:url';

23import { findProject, resolveEngine } from './project.mjs';

25const CONFIG_NAMES = ['eslint.config.js', 'eslint.config.mjs', 'eslint.config.cjs'];

27// Resolve ESLint from the GAME's node_modules — same preflight shape as

28// playwright in test-cmd.mjs. Games scaffolded before lint existed simply don't

29// have it; they skip rather than break.

30async function loadFromProject(projectDir) {

31 try {

32 const req = createRequire(join(projectDir, 'package.json'));

33 const mod = await import(pathToFileURL(req.resolve('eslint')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/lint.mjsView on unpkg · L31

34 return mod.ESLint ?? mod.default?.ESLint ?? null;

35 } catch {

36 return null;

37 }

38}

40// The shareable config, out of the installed engine artifact.

41//

42// The two ways this can come up empty are DIFFERENT problems with different

43// fixes, and conflating them sends people in a circle: the first version of this

44// said "engine ships no rules — run looop update" when the engine was not

45// installed at all, so `looop update` was the one command that could never help.

46// Say which it is.

47async function loadRulesFromEngine(projectDir) {

48 let engineDir;

49 try {

50 ({ dir: engineDir } = resolveEngine(projectDir));

51 } catch {

lib/test-cmd.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @looop-games/cli@0.1.16 matchedIdentity = npm:QGxvb29wLWdhbWVzL2NsaQ:0.1.16 similarity = 0.920 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/test-cmd.mjsView on unpkg

Source & flagged code

2 flagged · loading source

lib/lint.mjsView file

31try { L32: const req = createRequire(join(projectDir, 'package.json')); L33: const mod = await import(pathToFileURL(req.resolve('eslint')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/lint.mjsView on unpkg · L31

lib/test-cmd.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/test-cmd.mjsView on unpkg

Findings

1 High3 Medium4 Low

HighPrevious Version Dangerous Deltalib/test-cmd.mjs

MediumDynamic Requirelib/lint.mjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

lib/lint.mjsView file

Lines 11-51javascript

11// command resolves them out of the game's installed engine, which is the very

12// same file its eslint.config.js imports. One copy: the gate and the editor

13// cannot disagree.

14//

15// Escape hatch: `// eslint-disable-next-line looop/<rule>` — the one every

16// developer already knows. This is mandatory, not a nicety: creators are not

17// developers, and a false positive must never wall someone out of their own

18// test command with no way through.

19import { existsSync } from 'node:fs';

20import { createRequire } from 'node:module';

21import { join, relative } from 'node:path';

22import { pathToFileURL } from 'node:url';

23import { findProject, resolveEngine } from './project.mjs';

25const CONFIG_NAMES = ['eslint.config.js', 'eslint.config.mjs', 'eslint.config.cjs'];

27// Resolve ESLint from the GAME's node_modules — same preflight shape as

28// playwright in test-cmd.mjs. Games scaffolded before lint existed simply don't

29// have it; they skip rather than break.

30async function loadFromProject(projectDir) {

31 try {

32 const req = createRequire(join(projectDir, 'package.json'));

33 const mod = await import(pathToFileURL(req.resolve('eslint')).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/lint.mjsView on unpkg · L31

34 return mod.ESLint ?? mod.default?.ESLint ?? null;

35 } catch {

36 return null;

37 }

38}

40// The shareable config, out of the installed engine artifact.

41//

42// The two ways this can come up empty are DIFFERENT problems with different

43// fixes, and conflating them sends people in a circle: the first version of this

44// said "engine ships no rules — run looop update" when the engine was not

45// installed at all, so `looop update` was the one command that could never help.

46// Say which it is.

47async function loadRulesFromEngine(projectDir) {

48 let engineDir;

49 try {

50 ({ dir: engineDir } = resolveEngine(projectDir));

51 } catch {

lib/test-cmd.mjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/test-cmd.mjsView on unpkg