registry / @lousy-agents/cli / 5.16.0

@lousy-agents/cli@5.16.0

CLI scaffolding tool that sets up projects with structure, instructions, and feedback loops for AI coding assistants

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a project scaffolding and AI-assistant setup CLI with user-invoked writes and aligned GitHub API usage.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs lousy-agents CLI subcommands such as init-hooks, copilot-setup, new, or init.

Impact

Project files may be created or updated by requested CLI commands; no install-time execution or unconsented persistence found.

Mechanism

explicit project scaffolding and hook/workflow configuration

Rationale

Static inspection found AI-agent hook mutation and GitHub token/network primitives, but they are exposed through documented, user-invoked CLI commands and bounded to project setup behavior. There is no lifecycle execution, credential harvesting, hidden payload, or unconsented agent control-surface mutation.

Evidence

package.jsonREADME.mddist/index.jsdist/913.js.claude/settings.json.github/workflows/copilot-setup-steps.yml.npmrc.github/agents/<name>.md.github/skills/<name>/SKILL.md.lousy-agents/lessons/<slug>.md

Network endpoints2

api.github.comuploads.github.com

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no install/preinstall/postinstall lifecycle scripts; bin points to dist/index.js only.
dist/index.js registers explicit CLI subcommands: init, lint, new, copilot-setup, context, init-hooks, capture, doctor.
init-hooks writes .claude/settings.json only when user invokes the command, adding hooks that run lousy-agents context/capture.
context/capture read Claude hook stdin and local .lousy-agents/lessons; they emit context/prompts, not shell commands or exfiltration.
GitHub API/gh token use is limited to user-invoked copilot-setup ruleset management and repository detection.
dist/913.js Unicode finding is JSON5/confbox dependency character tables, not hidden control-flow source.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

WildcardDependency

scanned 25 file(s), 618 KB of source, external domains: 127.0.0.1, api.github.com, bitbucket.com, bitbucket.org, caniuse.com, git.sr.ht, github.com, gitlab.com, raw.githubusercontent.com

Oversized source lightweight scan

dist/index.js2.08 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsHighEntropyStringsUrlStringscaniuse.com

Source & flagged code

3 flagged

dist/913.jsView file

Lines 1-40javascript

1export const __rspack_esm_id = 913;

2export const __rspack_esm_ids = [913];

3export const __webpack_modules__ = {

42576(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

6// EXPORTS

7__webpack_require__.d(__webpack_exports__, {

8 parseJSON5: () => (/* binding */ json5_s)

9});

11// UNUSED EXPORTS: stringifyJSON5

13// EXTERNAL MODULE: external "node:module"

14var external_node_module_ = __webpack_require__(8995);

15;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/rolldown-runtime.mjs

16var rolldown_runtime_e=Object.create,rolldown_runtime_t=Object.defineProperty,rolldown_runtime_n=Object.getOwnPropertyDescriptor,rolldown_runtime_r=Object.getOwnPropertyNames,rolldown_runtime_i=Object.getPrototypeOf,rolldown_runtime_a=Object.prototype.hasOwnProperty,rolldown_runtime_o=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),rolldown_runtime_s=(e,i,o,s)=>{if

17// EXTERNAL MODULE: ../../node_modules/confbox/dist/_chunks/_format.mjs

18var _format = __webpack_require__(5492);

19;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/libs/json5.mjs

20var json5_t=rolldown_runtime_o(((e,t)=>{t.exports.Space_Separator=/[\u1680\u2000-\u200A\u202F\u205F\u3000]/,t.exports.ID_Start=/[\xAA\xB5\xBA\xC0-\xD6\xD8-\xF6\xF8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377\u037A-\u037D\u037F\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5\u03F7-\u0481\u048A-\u052F\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA\u05F0

21`?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case``:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

22`:case`\r`:case`\u2028`:case`\u2029`:x();return;case`/`:x(),m=`comment`;return;case void 0:return x(),C(`eof`)}if(r.isSpaceSeparator(v)){x();return}return S[a]()},comment(){switch(v){case`*`:x(),m=`multiLineComment`;return;case`/`:x(),m=`singleLineComment`;return}throw j(x())},multiLineComment(){switch(v){case`*`:x(),m=`multiLineCommentAsterisk`;return;case void 0:throw j(x())}x()},multiLineCommentAsterisk(){switch(v){case`*`:x();return;case`/`:x(),m=`default`;return;case void 0:throw j(x())}x(),m=`multiLineComment`},singleLineComment(){switch(v){case`

23`:case`\r`:case`\u2028`:case`\u2029`:x(),m=`default`;return;case void 0:return x(),C(`eof`)}x()},value(){switch(v){case`{`:case`[`:return C(`punctuator`,x());case`n`:return x(),w(`ull`),C(`null`,null);case`t`:return x(),w(`rue`),C(`boolean`,!0);case`f`:return x(),w(`alse`),C(`boolean`,!1);case`-`:case`+`:x()===`-`&&(_=-1),m=`sign`;return;case`.`:h=x(),m=`

24`:case`\r`:throw j(x());case`\u2028`:case`\u2029`:P(v);break;case void 0:throw j(x())}h+=x()},start(){switch(v){case`{`:case`[`:return C(`punctuator`,x())}m=`value`},beforePropertyName(){switch(v){case`$`:case`_`:h=x(),m=`identifierName`;return;case`\\`:x(),m=`identifierNameStartEscape`;return;case`}`:return C(`punctuator`,x());case`"`:case`'`:g=x()===`"`,m=`string`;return}if(r.isIdStartChar(v)){h+=x(),m=`identifierName`;return}throw j(x())},afterPropertyName(){if(v===`:`)return C(`punctuator`,x());throw j(x())},beforePropertyValue(){m=`value`},afterPropertyValue(){switch(v){case`,`:case`

25`;case`r`:return x(),`\r`;case`t`:return x(),` `;case`v`:return x(),`\v`;case`0`:if(x(),r.isDigit(b()))throw j(x());return`\0`;case`x`:return x

26`:case`\u2028`:case`\u2029`:return x(),``;case`\r`:return x(),b()===`

27`&&x(),``;case`1`:case`2`:case`3`:case`4`:case`5`:case`6`:case`7`:case`8`:case`9`:throw j(x());case void 0:throw j(x())}return x()}function E(){

28`+a;e=r.join(n),s=`{

29`+a+e+`,

30`+t+`}`}}return i.pop(),a=t,s}function p(e){if(e.length===0)return d(e,!0);let t=String.fromCodePoint(e.codePointAt(0));if(!r.isIdStartChar(t))return d(e,!0);for(let n=t.length;n<e.length;n++)if(!r.isIdContinueChar(String.fromCodePoint(e.codePointAt(n))))return d(e,!0);return e}function m(e){if(i.indexOf(e)>=0)throw TypeError(`Converting circular structure to JSON5`);i.push(e);let t=a;a+=c;let n=[];for(let t=0;t<e.length;t++){let r=u(String(t),e);n.push(r===void 0?`null`:r)}let r;if(n.length===0)r=`[]`;else if(c===``)r=`[`+n.join(`,`)+`]`;else{let e=`,

31`+a,i=n.join(e);r=`[

32`+a+i+`,

33`+t+`]`}return i.pop(),a=t,r}}}));

34;// CONCATENATED MODULE: ../../node_modules/confbox/dist/json5.mjs

35var json5_a=rolldown_runtime_c(json5_r(),1),json5_o=rolldown_runtime_c(json5_i(),1);function json5_s(e,n){let r=(0,json5_a.default)(e,n?.reviver);return (0,_format.n)(e,r,n),r}function json5_c(e,t){let r=n(e,t),i=(0,json5_o.default)(e,t?.replacer,r.indent);return r.whitespace.start+i+r.whitespace.end}

37},

39};

Long lines were clipped for display.

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2176711 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2176711 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/913.jsView file

21contains invisible/control Unicode U+FEFF (zero width no-break space) `?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case`<U+FEFF>`:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2176711 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2176711 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

Findings

1 Critical1 High5 Medium5 Low

CriticalTrojan Source Unicodedist/913.js

HighOversized Source Filedist/index.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/index.js

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/913.jsView file

Lines 1-40javascript

1export const __rspack_esm_id = 913;

2export const __rspack_esm_ids = [913];

3export const __webpack_modules__ = {

42576(__unused_rspack___webpack_module__, __webpack_exports__, __webpack_require__) {

6// EXPORTS

7__webpack_require__.d(__webpack_exports__, {

8 parseJSON5: () => (/* binding */ json5_s)

9});

11// UNUSED EXPORTS: stringifyJSON5

13// EXTERNAL MODULE: external "node:module"

14var external_node_module_ = __webpack_require__(8995);

15;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/rolldown-runtime.mjs

17// EXTERNAL MODULE: ../../node_modules/confbox/dist/_chunks/_format.mjs

18var _format = __webpack_require__(5492);

19;// CONCATENATED MODULE: ../../node_modules/confbox/dist/_chunks/libs/json5.mjs

21`?(c++,l=0):e?l+=e.length:l++,e&&(s+=e.length),e}let S={default(){switch(v){case` `:case`\v`:case`\f`:case` `:case`\xA0`:case``:case`

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/913.jsView on unpkg · L21

25`;case`r`:return x(),`\r`;case`t`:return x(),` `;case`v`:return x(),`\v`;case`0`:if(x(),r.isDigit(b()))throw j(x());return`\0`;case`x`:return x

26`:case`\u2028`:case`\u2029`:return x(),``;case`\r`:return x(),b()===`

27`&&x(),``;case`1`:case`2`:case`3`:case`4`:case`5`:case`6`:case`7`:case`8`:case`9`:throw j(x());case void 0:throw j(x())}return x()}function E(){

28`+a;e=r.join(n),s=`{

29`+a+e+`,

31`+a,i=n.join(e);r=`[

32`+a+i+`,

33`+t+`]`}return i.pop(),a=t,r}}}));

34;// CONCATENATED MODULE: ../../node_modules/confbox/dist/json5.mjs

37},

39};

Long lines were clipped for display.

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2176711 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2176711 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg